CVE-2013-3387: Undefined Security Weakness

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service disk consumption via a flood of TCP packets to port 5400, leading to large error-log files, aka Bug ID CSCua42724...

CVE-2013-3388: Undefined Security Weakness

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 44444, aka Bug ID CSCtz92776...

CVE-2013-3389: Undefined Security Weakness

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 1 61615 or 2 61616, aka Bug ID CSCtz90114...

CVE-2013-3390: Undefined Security Weakness

Memory leak in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets, aka Bug ID CSCub59158...

CVE-2013-3398

The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, ak...

CVE-2013-3398

CVE-2013-3398 affects Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance. The web framework responds differently to requests for arbitrary pathnames, enabling unauthenticated remote attackers to enumerate directories and files. Root cause: insufficient security hardening of HTT...

Cisco Prime for HCS Assurance Information Disclosure Vulnerability

A vulnerability in web framework could allow an unauthenticated, remote attacker to access information about internal file system resources such as paths and names of files and directories. The vulnerability is due to insufficient security hardening of replies to crafted HTTP requests. An attacke...

CVE-2013-3398: Exposure of Sensitive Information to an Unauthorized Actor

The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, ak...

World's most secure messaging service offers £10,000 if you crack it

Privacy conscious phone users are being offered a new app that claims to be the world's first totally secure messaging service. A London-based iPhone messaging app claims to be unhackable and is offering reward to anyone who can intercept a message sent by it. Redact believes that messages sent v...

CVE-2013-0936: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web script or HTML via a...

CVE-2013-1135

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.0 allows remote attackers to cause a denial of service CPU consumption and monitoring outage via malformed TLS messages to TCP port 1 9043 or 2 9443, aka Bug ID CSCuc07155...

Code injection

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.0 allows remote attackers to cause a denial of service CPU consumption and monitoring outage via malformed TLS messages to TCP port 1 9043 or 2 9443, aka Bug ID CSCuc07155...

CVE-2013-1135

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.0 allows remote attackers to cause a denial of service CPU consumption and monitoring outage via malformed TLS messages to TCP port 1 9043 or 2 9443, aka Bug ID CSCuc07155...

Cisco Prime Central for Hosted Collaboration Solution Assurance Excessive CPU Utilization Vulnerability

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Exploitation of this vulnerability could interrupt the monitoring of voice services. Cisco has released...

CVE-2013-1135: Improper Input Validation

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.0 allows remote attackers to cause a denial of service CPU consumption and monitoring outage via malformed TLS messages to TCP port 1 9043 or 2 9443, aka Bug ID CSCuc07155...

After Five Years, SAFECode Sees Software Security Progress, But Challenges Remain

Software security, code quality and the iea of building security into applications from the design phase forward have become touchstones for any conversation about how to improve the security of the Web and the general IT infrastructure. But it wasn’t always thus. In fact, it wasn’t too many year...

DoD Program Expanded, Designed to Share Threat Information

The Pentagon on Friday invited a slew of government contractors to meet and share classified information on cyber threats going forward, part of an initiative that the department hopes will reduce the risk of intrusions to government systems. The information sharing model that the Department of...

Bogus Report: 55,000 Twitter accounts compromised

Bogus Report: 55,000 Twitter accounts compromised Thousands of Twitter passwords were exposed this week and the site was looking into matter. According to a message posted on Twitter's Japanese blog, None of the recently leaked Twitter logins and passwords came from within the company. Twitter ha...

TestLink 1.9.3 SQL Injection

------------------ Information ------------------ Name: SQL Injection Vulnerabilities in TestLink Software tested: TL v1.8.5b & checked in v1.9.3 prior version may be affected Vendor Homepage: http://www.teamst.org Vendor Notification: 27 January 2012 Vendor Patch: 4 February 2012 Public...

SA-CONTRIB-2012-010 - stickynote - Multiple vulnerabilities

CVE: CVE-2012-1636 This module enables you to add textual notes in a block to perform quality assurance of your site. Previously it did not sufficiently protect against Cross Site Scripting XSS or Cross Site Request Forgery CSRF. This vulnerability is mitigated by the fact that an attacker must...