CVE-2015-2894

Affected software. Up.time Up.time client (Windows) used by Idera Uptime Infrastructure Monitor. The CVE-2015-2894 vulnerability pertains to versions 6.0 and 7.2. Root cause and impact. A format string vulnerability (CWE-134) allows an unauthenticated, remote attacker to cause the application to ...

CVE-2015-2896

The Up.time client for Windows (Idera Uptime Infrastructure Monitor) is affected by CVE-2015-2896. Up to version 7.6, an unauthenticated network attacker can send built-in commands to the Up.time port and obtain potentially sensitive information about the product version, underlying OS, running p...

CVE-2015-2896

The up.time client in Idera Uptime Infrastructure Monitor through 7.6 allows remote attackers to obtain potentially sensitive version, OS, process, and event-log information via a command...

AlienVault Unified Security Management: Real-Time Threat Detection Starting on Day 1

As organizations expand their IT infrastructure to match their evolving business models and meet changing regulatory requirements, they often find that their networks have become extremely complex and challenging to manage. A primary concern for many IT teams is detecting threats in the mountain ...

Cisco Application Policy Infrastructure Controller Local Privileging Vulnerability

The Cisco Application Policy Infrastructure Controller is a controller that automates the management of application-centric infrastructure ACI. A security vulnerability exists in the Cisco Application Policy Infrastructure Controller that allows a local attacker to gain root privileges...

LATENTBOT: Trace Me If You Can

FireEye Labs recently uncovered LATENTBOT, a new, highly obfuscated BOT that has been in the wild since mid-2013. It has managed to leave hardly any traces on the Internet, is capable of watching its victims without ever being noticed, and can even corrupt a hard disk, thus making a PC useless...

Nmap 7 - Security Scanner For Network Exploration & Security Audits

Nmap “Network Mapper” is a free and open source license utility for network discovery and security auditing. Many systems and network administrators also find it useful for network inventory, managing service upgrade schedules, monitoring host or service uptime, and many other tasks. Nmap uses ra...

Mobile Application Security - Main Issues & Vulnerabilities

Document Title: =============== Mobile Application Security - Main Issues & Vulnerabilities References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1647 Download: https://www.vulnerability-lab.com/resources/documents/1647.pdf Vulnerability Magazine:...

[SECURITY] Fedora 23 Update: openms-2.0.0-21.20150529git88dc25.fc23

OpenMS is an open-source C++ library for LC/MS data management and analyses. It offers an infrastructure for the rapid development of mass spectrometry related software. It comes with a vast variety ready-to-use tools for proteomics and metabolomics data analysis TOPPTools and powerful 2D and 3D...

ProtonMail Back Online Following Six Day DDoS Attack

Encrypted email service ProtonMail is back online today following a crippling six-day attack that saw the company’s ISPs and data centers under siege. Operators behind the service said the site may not always be reachable, as its servers are still under heavy strain and mitigating attack, and tha...

ProtonMail Paid Hackers $6000 Ransom in Bitcoin to Stop DDoS Attacks

The Geneva-based encrypted email service ProtonMail was forced to pay a Ransom of almost $6,000 to stop sustained Denial-of-service DDoS attacks that have knocked its service offline since Tuesday. ProtonMail – a full, end-to-end encrypted email service that launched last year – has been dealing...

ACSC Releases 2015 Threat Report

The Australian Cyber Security Centre ACSC has released its 2015 Threat Report. This report provides threat information that Australian organizations are facing, such as cyber espionage, cyber attacks, and cyber crime. Mitigation and remediation steps are also included to assist organizations with...

Reflected Cross-Site Scripting (XSS) in iTop

Advisory ID: HTB23268 Product: iTop Vendor: Combodo SARL Vulnerable Versions: 2.1.0-2127 and probably prior Tested Version: 2.1.0-2127 Advisory Publication: July 29, 2015 without technical details Vendor Notification: July 29, 2015 Vendor Patch: July 30, 2015 Public Disclosure: September 23, 2015...

Cisco Application Policy Infrastructure Controller Elevation of Privilege Vulnerability

Cisco Application Policy Infrastructure Controller devices are an application-centric infrastructure ACI controller product. Cisco Application Policy Infrastructure Controller devices do not properly validate SSH keys added to accounts by local users, allowing a local attacker to exploit the...

CVE-2015-6332

Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service daemon hang by sending many SSL renegotiation requests, aka Bug ID CSCuv56830...

Code injection

Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service daemon hang by sending many SSL renegotiation requests, aka Bug ID CSCuv56830...

CVE-2015-6332

Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service daemon hang by sending many SSL renegotiation requests, aka Bug ID CSCuv56830...

CVE-2015-6332

CVE-2015-6332 affects Cisco Prime Infrastructure 2.2. The issue is due to improper handling of SSL renegotiation requests, enabling remote, unauthenticated DoS via multiple SSL renegotiation attempts (daemon hang). Root cause: vulnerability in SSL renegotiation handling. No software updates or wo...

Cisco Prime Infrastructure SSL Renegotiation Request Handling Denial of Service Vulnerability

Cisco Prime Infrastructure is an all-in-one package that provides complete infrastructure wired and wireless and mobile lifecycle management provisioning, monitoring, troubleshooting, fixing, and reporting. Cisco Prime Infrastructure does not properly handle SSL negotiation, allowing remote...

Faraday 1.0.15 - Collaborative Penetration Test and Vulnerability Management Platform

A brand new version is ready for you to enjoy! Faraday v1.0.15 Community, Pro & Corp was published today with new exciting features. As a part of our constant commitment to the IT sec community we added a tool that runs several other tools to all IPs in a given list. This results in a major scan ...