5496 matches found
Adobe Flash ActionScript 3 ByteArray use-after-free vulnerability
Overview Adobe Flash Player contains a vulnerability in the ActionScript 3 ByteArray class, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Adobe Flash Player versions 9.0 through version 18.0.0.194 contain a use-after-free...
U.S. and Japan to Cooperate on Cybersecurity, Information Sharing
The United States and Japan have agreed to cooperate more closely on cybersecurity and information sharing initiatives as a way to help both countries defend against future threats and attacks. The new initiative will include a variety of components, most notably cooperation during serious...
dedecms \plus\guestbook.php SQL Injection Vul By \plus\guestbook\edit. inc. php-vulnerability warning-the black bar safety net
Vulnerability description 2. Vulnerability trigger conditions 3. Vulnerability the range of 4. Vulnerability code analysis 5. Defense method 6. Offensive and defensive thinking ! Copy codes 1. Vulnerability description Injection vulnerability success requires the following conditions 1. php...
Active Defense Can Give Pause to Threats
SAN FRANCISCO – Disrupting hackers on your own network has become sort of a parlor trick for enterprises with enough resources and desire to dive into those waters. Today at RSA Conference, one expert explained how most organizations can leverage networking tools they’ve already invested in to pu...
Naval Academy Cadets Win NSA Hacking Contest
Midshipmen from the United States Naval Academy in have won the National Security Agency’s Cyber Defense Exercise CDX for the third time. Between April 13 and 17, the CDX pits the U.S. Naval, Air Force, Coast Guard, Merchant Marine and Military Academy and the Royal Military College of Canada...
The IIS server vulnerability analysis-vulnerability warning-the black bar safety net
4 on 1 to 5 November, in Microsoft's patch day, Microsoft released a more high-risk vulnerabilities, one of MS15-0 3 4 vulnerability that affects most widely, will cause the IIS server to blue screen crash, special circumstances or lead to information disclosure. Alibaba security research...
Return-into-libc attack and Defense-bug warning-the black bar safety net
This article first analyzes the return-into-libc attack principle, were introduced in different platforms for the traditional return-into-libc attack of the experimental process and results. Then, this paper further introduces and explains the return-oriented programming attacks, this attack can...
McAfee Advanced Threat Defense Information Disclosure Vulnerability (CNVD-2015-02279)
McAfee Advanced Threat Defense provides advanced threat defense that defends against advanced malware, including zero-day persistent threats and advanced persistent threats. A security vulnerability in the McAfee Advanced Threat Defense WEB interface allows a remote, authenticated attacker to...
McAfee Advanced Threat Defense Security Bypass Vulnerability
McAfee Advanced Threat Defense provides advanced threat defense that defends against advanced malware, including zero-day persistent threats and advanced persistent threats. McAfee Advanced Threat Defense has a security vulnerability that could allow a remotely authenticated attacker to bypass...
CVE-2015-3030
The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors...
CVE-2015-3029
The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 does not properly restrict access, which allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2015-3028
McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters...
Information disclosure
The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors...
Information disclosure
The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 does not properly restrict access, which allows remote authenticated users to obtain sensitive information via unspecified vectors...
Design/Logic Flaw
McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters...
CVE-2015-3030
CVE-2015-3030 affects McAfee Advanced Threat Defense (MATD) web interface prior to version 3.4.4.63. The vulnerability allows remote authenticated users to obtain sensitive configuration information via unspecified vectors (information disclosure). Impact is limited to disclosure of configuration...
CVE-2015-3029
CVE-2015-3029 affects McAfee Advanced Threat Defense (MATD) before version 3.4.4.63. The web interface does not properly restrict access, allowing remote authenticated users to obtain sensitive information via unspecified vectors (information disclosure). Affected product/version: MATD
CVE-2015-3028
The CVE-2015-3028 entry affects McAfee Advanced Threat Defense (MATD) versions prior to 3.4.4.63. The issue allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters, indicating an access-control weakness that enables conf...
