Cross-site Scripting Vulnerability in Collaboration - Bulletin board in Multiple Hitachi Products

Overview A cross-site scripting vulnerability has been found in Collaboration - Bulletin board in multiple Hitachi products. Impact Remote users can exploit this vulnerability to execute malicious scripts. Solution Please refer to the 'Vendor Information' section for the official countermeasure a...

FBI Moves to Identify More Hackers

The FBI says it is now making a push to not just stop cybercrime but to identify the attackers behind the phishing, credit card fraud and other campaigns that cost consumers and enterprises billions of dollars each year. The bureau is the lead agency charged with addressing cybercrime in the U.S...

NASA Tri-Agency Climate Education (TrACE) v1.0 Multiple XSS Vulnerabilities

Summary The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE focuses on climate education resources that have been developed by initiatives funded through NASA, NOAA, and NSF, comprising a tri-agency collaborati...

Verizon DBIR Analysis: Insiders Often Complicit in Breaches of Intellectual Property

Verizon has further dissected breach data from its annual Data Breach Investigations Report DBIR and built a profile of intellectual property theft that points to a disturbing combination of factors leading to successful infiltrations by cybercriminals, competitors, hacktivists and nation-state...

CVE-2012-5091

Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to Supplier Portal...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to Supplier Portal...

CVE-2012-5091

CVE-2012-5091 targets Oracle Agile Product Supplier Collaboration for Process in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0. The documented impact is an unspecified vulnerability affecting confidentiality via unknown vectors related to the Supplier Portal; CVSS v2 base score 4.3 (MEDIUM...

CVE-2012-5091

Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to Supplier Portal...

Fedora Update for moin FEDORA-2012-13408

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2012-13408 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for moin FEDORA-2012-13400

Check for the Version of moin OpenVAS Vulnerability Test Fedora Update for moin FEDORA-2012-13400 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Disconnect Between Application Development and Security Getting Wider

There is a widening gulf between application developers and security decision makers inside the enterprise, and it’s starting to cost companies serious money. Sure there’s been lots of talk about the need for better static and dynamic web application testing tools and the need for a formalized...

[SECURITY] Fedora 18 Update: moin-1.9.4-3.fc18

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

[SECURITY] Fedora 17 Update: moin-1.9.4-3.fc17

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

[SECURITY] Fedora 16 Update: moin-1.9.4-3.fc16

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

IBM Notes Client Detection

The remote host has IBM Notes installed. IBM Notes formerly IBM Lotus Notes is a business collaboration software client that connects to IBM Notes servers. This software has various capabilities including email, calendaring, and instant messaging. C Tenable Network Security, Inc...

Cortana scripting language introduced for Cobalt Strike and Armitage

At DEFCON 20, Raphael Mudge the developer of Armitage released the most significant update to Armitage. Armitage is now fully scriptable and capable of hosting bots in acollaborative hacking engagement. Raphael Mudge is the founder of Strategic Cyber LLC, a Washington, DC based company that creat...

Feds Show Up at DEF CON and Black Hat, But This Time to Talk, Not Snoop

LAS VEGAS–The Black Hat conference is now officially an adolescent, and like most in that age group, it has gone through some growing pains in its life. Once criticized for giving too much of a platform for offensive research, and then, after its sale a few years ago to a media conglomerate, ding...

Zimbra 7.2 NE & OSE 7.2 GA - Multiple Web Vulnerabilities

Document Title: =============== Zimbra 7.2 NE & OSE 7.2 GA - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=581 Release Date: ============= 2012-06-14 Vulnerability Laboratory ID VL-ID: ==================================== 5...

Zimbra 7.2 NE & OSE 7.2 GA - Multiple Web Vulnerabilities

Document Title: =============== Zimbra 7.2 NE & OSE 7.2 GA - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=581 Release Date: ============= 2012-06-14 Vulnerability Laboratory ID VL-ID: ==================================== 5...

[SECURITY] Fedora 17 Update: mozilla-https-everywhere-2.0.3-2.fc17

HTTPS Everywhere is a Firefox extension produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. It encrypts your communications with a number of major websites. Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to...