Intel Patches High-Severity Privilege-Escalation Bugs

Intel on Tuesday patched three high-severity vulnerabilities that could allow the escalation of privileges across an array of products. Overall, the chip giant fixed five bugs – three rated high-severity, and two medium-severity. The most concerning of these bugs is an escalation-of-privilege...

The vulnerability of the Cisco Prime File Upload service in the Data Center Network Manager (DCNM) and the Prime Infrastructure (PI) network lifecycle management software allows a malicious attacker to upload arbitrary files to any directory on the vulnerable device and execute them.

The vulnerability of the Cisco Prime File Upload service in the Data Center Network Manager DCNM and the Prime Infrastructure PI network lifecycle management software is due to errors in specifying the path to the directory, as well as the absence of restrictions during the upload of files of a...

#OTTuesday: iTV on Live Streaming the World Cup

Imagine you're iTV. One of the UK's biggest commercial broadcasters. You have the rights for the World Cup and England has made the semi-finals. The whole country is watching. How do you make sure you're meeting the gold standard of delivering a glitch-free, "TV-like experience" over the internet...

Unspecified Vulnerability in Schneider Electric StruxureWare Data Center Operation

Schneider Electric StruxureWare Data Center Operation is a suite of data center operations software from Schneider Electric, France. The software provides an instant overview of data center operations through inventory management, PUE calculations, real-time equipment alerts and location-based...

Unspecified Vulnerability in Schneider Electric StruxureWare Data Center Expert

Schneider Electric StruxureWare Data Center Expert is a suite of centralized data center infrastructure management software from Schneider Electric, France. The software collects and distributes critical alarms, surveillance video and key information, and supports a unified view of the physical...

Path traversal

Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could allow for the arbitrary uplo...

CVE-2018-7806

Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could allow for the arbitrary uplo...

CVE-2018-7807

Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could...

Path traversal

Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could...

CVE-2018-7807

Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could...

CVE-2018-7806

Schneider Electric StruxureWare Data Center Operation is affected by CVE-2018-7806 due to a ZipSlip-style path traversal vulnerability in its file-upload feature. A authenticated user can upload a crafted ZIP containing path traversal file names, which could cause arbitrary files to be written to...

CVE-2018-7807

CVE-2018-7807 affects Schneider Electric StruxureWare Data Center Expert (Data Center Expert) up to version 7.5.0. Affected component: ZIP upload feature via the user interface that accepts ZIP files; root cause is a ZipSlip-like path traversal in Java code, enabling an authenticated user to uplo...

CVE-2018-7806

Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could allow for the arbitrary uplo...

CVE-2018-7807

Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could...

Infection Monkey v1.6 - An Automated Pentest Tool

The Infection Monkey is an open source security tool for testing a data center's resiliency to perimeter breaches and internal server infection. The Monkey uses various methods to self-propagate across a data center and reports success to a centralized Monkey Island server. The Infection Monkey i...

[SECURITY] Fedora 27 Update: lldpad-1.0.1-9.git036e314.fc27

This package contains the Linux user space daemon and configuration tool for Intel LLDP Agent with Enhanced Ethernet support for the Data Center...

Data Center Audit 2.6.2 - Cross-Site Request Forgery (Update Admin) Vulnerability

Exploit for php platform in category web applications Exploit Title: Data Center Audit 2.6.2 - Cross-Site Request Forgery Update Admin Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/datacenteraudit/ Software Link:...

Data Center Audit 2.6.2 - Cross-Site Request Forgery (Update Admin)

Data Center Audit 2.6.2 - Cross-Site Request Forgery Update Admin Exploit Title: Data Center Audit 2.6.2 - Cross-Site Request Forgery Update Admin Dork: N/A Date: 2018-11-09 Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/datacenteraudit/ Software Link:...

Data Center Audit 2.6.2 Cross Site Request Forgery

Exploit Title: Data Center Audit 2.6.2 - Cross-Site Request Forgery Update Admin Dork: N/A Date: 2018-11-09 Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/datacenteraudit/ Software Link: https://netix.dl.sourceforge.net/project/datacenteraudit/datacenterauditv262.z...

Data Center Audit 2.6.2 - Cross-Site Request Forgery (Update Admin)

Exploit Title: Data Center Audit 2.6.2 - Cross-Site Request Forgery Update Admin Dork: N/A Date: 2018-11-09 Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/datacenteraudit/ Software Link: https://netix.dl.sourceforge.net/project/datacenteraudit/datacenterauditv262.z...