Cisco Prime Central for Hosted Collaboration Solution Assurance Denial of Service Vulnerabilities

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance contains multiple vulnerabilities that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Exploitation of these vulnerabilities could interrupt the monitoring of voice services and exhaust...

[Malcom] Malware Communication Analyzer

Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic. This comes handy when analyzing how certain malware species try to communicate with the outside world. Malcom can help you: detect central command and control C&C servers...

Fedora Update for subversion FEDORA-2013-13696

Check for the Version of subversion OpenVAS Vulnerability Test Fedora Update for subversion FEDORA-2013-13696 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 18 Update: subversion-1.7.11-1.fc18.1

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

[SECURITY] Fedora 19 Update: subversion-1.7.11-1.fc19

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

Mozilla, Blackberry To Test Website Security Via Fuzzing

Mozilla and Blackberry have announced a new collaboration project; the two companies will begin working in tandem to more fully flesh out Peach – a free software fuzzing application first developed nearly a decade ago – for testing the security of web browsers. In a post on its company blog by...

CVE-2013-3824

Unspecified vulnerability in the Oracle Agile Collaboration Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment...

CVE-2013-3824

Unspecified vulnerability in the Oracle Agile Collaboration Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Collaboration Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts...

CVE-2013-3824

Unspecified vulnerability in the Oracle Agile Collaboration Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts...

CVE-2013-3825

CVE-2013-3825 concerns the Oracle Agile Product Collaboration component within Oracle Supply Chain Products Suite 9.3.1. The description states an unspecified vulnerability that allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment. ...

CVE-2013-3824

The CVE-2013-3824 entry concerns Oracle Supply Chain Products Suite 9.3.1, specifically the Oracle Agile Collaboration Framework component. It describes an unspecified vulnerability that allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts. ...

Microsoft handed over encrypted messages key and Skype calls access to NSA

New top secret documents provided by Edward Snowden exposed that Microsoft worked hand-in-hand with the United States government and handed the NSA access to encrypted messages and built a series of backdoors into Outlook.com, Skype, and SkyDrive to ease difficulties in accessing online...

Cisco Desktop Collaboration Experience DX600 Series Potential Code Injection Vulnerability

A vulnerability in an underlying Android Application Programming Interface API utilized by the Cisco Desktop Collaboration Experience DX600 series endpoint could allow an authenticated, local attacker to inject code into the system. The vulnerability is due to insufficient validation of specific...

Command injection

The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, ak...

CVE-2013-3398

CVE-2013-3398 affects Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance. The web framework responds differently to requests for arbitrary pathnames, enabling unauthenticated remote attackers to enumerate directories and files. Root cause: insufficient security hardening of HTT...

[Dradis Pro v1.7] Framework to enable effective information sharing

Dradis Pro is framework to enable effective information sharing, specially during security assessments. Dradis is a self-contained web application that provides a centralised repository of information to keep track of what has been done so far, and what is still ahead. Changelog v1.7 This is the...

Cisco Prime Central for Hosted Collaboration Solution Cross-Site Scripting Vulnerability

A vulnerability in the portal page of Cisco Prime Central for Hosted Collaboration Solution could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to a failure to properly...

CVE-2013-3375

Cross-site scripting XSS vulnerability in the portal page in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCue23798...