Cisco Virtualization Experience Client Series 6000 Local Arbitrary Command Execution Vulnerability

A vulnerability in the diagnostic module of the Cisco Virtualization Experience Client 6000 Series could allow an authenticated, non-privileged, local attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to lack of input validation in the diagnostic...

MiniUPnPd Information Disclosure (CVE-2013-2600)

Hi list, I am writing to inform you of an information disclosure vulnerability I noticed in MiniUPnPd a few months back. Specifically, MiniUPnPd versions 1.8 and earlier are prone to an information disclosure vulnerability due to improper use of snprintf while preparing SSDP responses. An attacke...

Malware threat to Opera users, Trojan signed with a stolen certificate

On June 19, Browser maker Opera admitted that, it discovered an attack on its internal network infrastructure and windows users may have been tricked into installing a Trojan signed with a stolen Opera certificate. "On June 19th we uncovered, halted and contained a targeted attack on our internal...

Stolen Opera Code-Signing Certificate Used to Sign Malware

Opera Software said it was able to contain the impact of a security breach that resulted in the theft of an expired code-signing certificate used to sign malware distributed to Windows users during a 36-minute stretch on June 19. Opera developer Sigbjorn Vik said the browser maker was victimized ...

Malware threat to Opera users, Trojan signed with a stolen certificate

On June 19, Browser maker Opera admitted that, it discovered an attack on its internal network infrastructure and windows users may have been tricked into installing a Trojan signed with a stolen Opera certificate. "On June 19th we uncovered, halted and contained a targeted attack on our internal...

Cisco Nexus 1000V VSM/VEM Heartbeat Denial of Service Vulnerability

A vulnerability in the Cisco Nexus 1000V could allow an unauthenticated, remote attacker to cause a Virtual Supervisor Module VSM to report a Virtual Ethernet Module VEM as unavailable. The vulnerability is due to insufficient prioritization for VSM/VEM heartbeat messages. An attacker could explo...

Cisco Unified Presence Memory Exhaustion Vulnerability

A vulnerability in the web framework of Cisco Unified Presence could allow an unauthenticated, remote attacker to cause an increase in memory utilization. The vulnerability is due to improper handling of memory allocation when the affected system is flooded with malformed TCP packets. An attacker...

PT-2013-62: Internal Network Resources Access in Web Viewer for Samsung DVR

The specialists of the Positive Research center have detected "Internal Network Resources Access" vulnerability in Web Viewer for Samsung DVR. The vulnerability allows attackers to get unauthorized access to view and control the cameras via unsafe cookies parsing. If an attacker sends the request...

Bangladesh military Server and internal network Compromised

Indian Hacker Godzilla aka G.O.D hacked into Bangladesh Army servers, belongs to domain www.army.mil.bd and leak Internal Network Information via a note. Hacker also publicly posted their Cisco Router passwords and Mac-Address of all machines within the network. We talked with the hacker to know...

Go Daddy CEO Denies Hackers Behind Major Outage

The CEO of Go Daddy said Tuesday internal issues, not a denial of service attack, left millions of hosted sites offline for several hours yesterday. In a statement, interim chief executive Scott Wagner said an internal investigation into the outage concluded no outside attack took place. “The...

Aramco Threatened With New Attack

Attackers are threatening to launch a second assault on Saudi Aramco on Saturday in order to prove its abilities and the fact that it’s not relying on help from an Aramco insider. The first attack on the oil company occurred last week and resulted in the company taking its Web sites offline, sayi...

Cisco Unified Computing System Remote Denial of Service Vulnerability

Cisco Unified Computing System contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted system. The vulnerability is due to the improper handling of user-supplied SSH requests by affected software. An unauthenticated,...

Cisco AnyConnect Secure Mobility Client WebLaunch Session Hijack Vulnerability

Cisco AnyConnect Secure Mobility Client contains a vulnerability that could allow an unauthenticated, remote attacker to hijack WebLaunch sessions, which could allow the attacker to intercept sensitive information. The vulnerability is due to the failure to perform certificate name checking in an...

Cisco AnyConnect Secure Mobility Client IPsec Certificate Validation Vulnerability

Cisco AnyConnect Secure Mobility Client contains a vulnerability that could allow an unauthenticated, remote attacker to conduct man-in-the-middle attacks. The vulnerability exists because the affected software does not perform certificate name checking in an X.509 certificate when the software i...

HAProxy Statistics Page Detection

The remote host is running HAProxy web-based statistics page. This page may contain sensitive information about internal network infrastructure and version information for HAProxy. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid59797; scriptversion"1.6";...

Cisco Unified MeetingPlace SQL Injection Vulnerability

Cisco Unified MeetingPlace contains a vulnerability that could allow an authenticated, remote attacker to execute arbitrary SQL code on a targeted system. The vulnerability is due to improper validation of user-supplied input to the web-based application interface. An authenticated, remote attack...

Squid Proxy Port Scanner

A exposed Squid proxy will usually allow an attacker to make requests on their behalf. If misconfigured, this may give the attacker information about devices that they cannot normally reach. For example, an attacker may be able to make requests for internal IP addresses against an open Squid prox...

Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability

The host is running Microsoft IIS Webserver and is prone to IP address disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiisinternalipaddrdiscvuln.nasl 5698 2017-03-23 14:04:51Z cfi $ Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability Authors: Madhuri D...

Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability - Active Check

Microsoft Internet Information Services IIS Webserver is prone to an IP address disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

New Apache Reverse Proxy Flaw Allows Access to Internal Network

New Apache Reverse Proxy Flaw Allows Access to Internal Network Apache acknowledged another reverse proxy issue CVE-2011-4317 which was discovered by Apache developer from Red Hat while creating a QualysGuard vulnerability signature for an older problem CVE-2011-3368. Depending on the reverse pro...