WMI Drives Status (win)

Tests WMI Drives Status. OpenVAS Vulnerability Test $Id: GSHBWMIBootDrive.nasl 7061 2017-09-05 11:50:40Z teissa $ WMI Drives Test Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Set in an Workgroup Environment under Vista with enabled UAC this...

Check for SSIEnableCmdDirective at IIS (Windows)

The script detects if the SSI enable Cmd Directive is activated for the IIS. OpenVAS Vulnerability Test $Id: GSHBWMIIISexeccmd.nasl 7061 2017-09-05 11:50:40Z teissa $ Auslesen des Registry Wertes SSIEnableCmdDirective des IIS Windows Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone...

WMI Antivirus Status (win)

Tests WMI AntiVirus Status. OpenVAS Vulnerability Test $Id: GSHBWMIAntivir.nasl 8177 2017-12-19 13:39:45Z emoss $ WMI AntiVirus Test Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Set in an Workgroup Environment under Vista with enabled UAC th...

IIS Samplefiles and Scripte (Windows)

The script detects if IIS Samplefiles and Scripte are installed. OpenVAS Vulnerability Test $Id: GSHBWMIIISSamplefiles.nasl 7067 2017-09-06 11:50:33Z teissa $ IIS Samplefiles and Scripte Windows Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net S...

Find OS/2 and Posix Subsystem over WMI - Windows

Find OS/2 and Posix Subsystem over WMI. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.96007";...

CD-ROM Autostart (Windows)

The script detects if CD-ROM Autostart is activated. OpenVAS Vulnerability Test $Id: GSHBWMICD-Autostart.nasl 7061 2017-09-05 11:50:40Z teissa $ CD-ROM Autostart Windows Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Set in an Workgroup...

Check for SSIEnableCmdDirective at IIS - Windows

The script detects if the SSI enable Cmd Directive is activated for the IIS. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Risk: The Device Formerly Known as Your Hard Drive

Guest editorial by Paul Roberts In a weird kind of synchronicity, two stories recently have raised the specter of discarded not merely misplaced hard drives as the source of considerable consternation and legal wrangling. In the most serious incident, the Inspector General of the National Archive...

Taking a Page From Singapore's Cybersecurity Playbook

We could all learn a thing or two about developing an effective cyber security strategy from the government of Singapore. I was recently in Singapore to do a keynote for Singapore GovWare on the Changing State of the Endpoint and, while I was out there, I witnessed something interesting the...

Audit Finds Gaping Holes in NASA Security

The U.S. Government Accountability Office GAO has painted a bleak picture of the NASA’s IT security posture. An audit of the space agency’s computer systems found weaknesses in several critical areas, especially in the way NASA implemented access controls like user accounts, passwords and the...

JVN#33822756 Canon IT Solutions Inc. ACCESSGUARDIAN vulnerable to cross-site scripting

Canon IT Solutions Inc. ACCESSGUARDIAN is a web security gateway. ACCESSGUARDIAN contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by...

Study: Only 4% of Corporate IT Users Stick to Password Rules

Just 4% of users of corporate systems abide by IT security policies, even when that system handles very sensitive private information according to an academic survey pdf that has revealed humans to be the main flaw in any security system. Researchers at the University of Wisconsin-Madison and IT...

Zeus Trojan Part of New Outlook Web Access Phishing Scam

The attackers behind the Zeus Trojan have unleashed a new phishing scam that is specifically targeted at users of the popular corporate webmail tool Outlook Web Access. The phishing emails include the recipient’s actual email address and appear to be an update to the OWA application. The mail...

Hyperic HQ跨站脚本和脚本注入漏洞

CVECAN ID: CVE-2009-2897,CVE-2009-2898 Hyperic HQ是一个开源的IT资源管理平台。 Hyperic HQ没有正确地验证提交给mastheadAttach.do的typeId参数、Resource.do的eid参数以及admin/user /UserAdmin.do的u参数便返回给了用户，这可能导致反射式跨站脚本攻击；此外由于没有正确地过滤传送给Description参数的输入便在警告列表中返回给了用户，这可能导致存储式跨站脚本攻击。 SpringSource Hyperic HQ 4.2-beta1 SpringSource Hyperic ...

Cyberthieves Find Workplace Networks Are Easy Pickings

In a feature article in USAToday, Byron Acohido writes about porous and difficult to defend workplace networks that provide a haven for professional cybercrimals. Acohido writes: “Overly complex IT systems are producing endless opportunities for cyberthieves, who need only to master simple hackin...

HP LaserJet printers - 存储型xss

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-048 http://dsecrg.ru/pages/vul/show.php?id=148 Application: HP LaserJet printer web interface Vulnerable: HP LaserJet 2200, 4350, 4600, 5500, and many others Vendor URL: http://www.hp.com/ Bug: Multiple...

Security Audits: Important but Rare

From eSecurityPlanet Larry Barrett Securing data networks is important enough for the majority of companies to hire outside security firms to audit their systems but only about one in three bother to have their network audited every year, according to a new survey conducted by VanDyke Software an...

[SECURITY] Fedora 11 Update: libmikmod-3.2.0-5.beta2.fc11

libmikmod is a library used by the mikmod MOD music file player for UNIX-like systems. Supported file formats include MOD, STM, S3M, MTM, XM, ULT and IT...

Heartland, TJX Attacks Look Sadly Familiar

The news that federal authorities have indicted the man they claim is responsible for the TJX attack for also allegedly hacking into the networks of Heartland Payment Systems, 7-Eleven and the Hannaford Brothers grocery chain shows that law enforcement is indeed stepping up its work on cybercrime...

Piwigo SQL Injection Vulnerability - Security Advisory - SOS-09-007

Piwigo SQL Injection Vulnerability - Security Advisory - SOS-09-007 Release Date. 17-Aug-2009 Last Update. - Vendor Notification Date. 15-Jun-2009 Product. Piwigo Platform. Independent Affected versions. 2.0.0 verified, possibly others Severity Rating. Medium Impact. Manipulation of data Attack...