PT-2016-5908

Name of the Vulnerable Software and Affected Versions HPE Insight Control server deployment affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information or modify data. Recommendations At the moment, there is no information about a newer...

PT-2016-5910

Name of the Vulnerable Software and Affected Versions HPE Insight Control server deployment affected versions not specified Description The issue allows local users to gain privileges via unspecified vectors. Recommendations At the moment, there is no information about a newer version that contai...

PT-2016-5909

Name of the Vulnerable Software and Affected Versions HPE Insight Control server deployment affected versions not specified Description The issue allows remote attackers to modify data. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2016-4365: Undefined Security Weakness

HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-4362: Undefined Security Weakness

HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-4364: Undefined Security Weakness

HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors...

CVE-2016-4363: Improper Neutralization of Input During Web Page Generation

HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors...

PT-2016-5911

Name of the Vulnerable Software and Affected Versions HPE Insight Control server deployment affected versions not specified Description The issue allows remote attackers to obtain sensitive information via unspecified vectors. Recommendations At the moment, there is no information about a newer...

Locky Gets Clever!

As discussed in an earlier FireEye blog, we have seen Locky ransomware rise to fame in recent months. Locky is aggressively distributed via a JavaScript-based downloader sent as an attachment in spam emails, and may have overshadowed the Dridex banking Trojan as the top spam contributor. FireEye...

CVE-2015-6858: Exposure of Sensitive Information to an Unauthorized Actor

HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2016-3726

Name of the Vulnerable Software and Affected Versions HP Insight Control server provisioning versions prior to 7.5.0 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors. Recommendations For versions prior to 7.5.0, update to version 7.5.0 or later...

Ares - Python Botnet and Backdoor

Ares is made of two main programs: A Command aNd Control server, which is a Web interface to administer the agents An agent program, which is run on the compromised host, and ensures communication with the CNC The Web interface can be run on any server running Python. You need to install the...

GEOVAP Reliance 4 Control Server Privilege Escalation Vulnerability

GEOVAP Reliance 4 Control Server suffers from an unquoted search path issue impacting the service 'RelianceOpcDaWrapper' for Windows deployed as part of Reliance 4 SCADA/HMI system installer including Reliance OPC Server. This could potentially allow an authorized but non-privileged local user to...

GEOVAP Reliance 4 Control Server Unquoted Service Path Elevation Of Privilege

Summary Reliance is a professional SCADA/HMI system designed for the visualization and control of industrial processes and for building automation. Description The application suffers from an unquoted search path issue impacting the service 'RelianceOpcDaWrapper' for Windows deployed as part of...

Cisco Secure Access Control Server Security Restriction Bypass Vulnerability

Cisco Secure Access Control Server that is ACS, is the United States Cisco Cisco a security access control server. A security restriction bypass vulnerability exists in Cisco Secure Access Control Server 5.7. It allows an authenticated remote user to bypass expected RBAC restrictions by accessing...

Cisco Secure Access Control Server Security Restriction Bypass Vulnerability (CNVD-2015-07358)

Cisco Secure Access Control Server that is ACS, is the United States Cisco Cisco a security access control server. A security restriction bypass vulnerability exists in Cisco Secure Access Control Server 5.7. It allows an authenticated remote user to bypass expected RBAC restrictions and create...

Cisco Secure Access Control Server Cross-Site Scripting Vulnerability

Cisco Secure Access Control Server that is ACS, is the United States Cisco Cisco a security access control server. A cross-site scripting vulnerability exists in Cisco Secure Access Control Server 5.7. This allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Shuanet Adware Roots Android Devices

A new strain of adware buried in repackaged popular Android applications is able to root devices and earn its keepers a tidy $2 per installation. Shuanet behaves more like malware and shares some heritage with two other adware families—Kemoge and Shedun—that also root devices and give their...

Cisco ACS Solution Engine Cross-Site Scripting Vulnerability

Cisco Secure Access Control Server ACS is a security access control server from Cisco, Inc.Solution Engine is one of the server engine solutions. Cisco Secure Access Control Server ACS version 5.70.15, an XSS vulnerability exists in the web interface of Solution Engine. A remote attacker could...

CVE-2015-6349

Cross-site scripting XSS vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Server ACS 5.70.15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...