LibreNMS Cross-Site Scripting Vulnerability (CNVD-2021-93896)

LibreNMS is a PHP/MYSQL/SNMP-based open source monitoring tool. a stored cross-site scripting vulnerability exists in API access pages in versions of LibreNMS prior to 21.3.0. The vulnerability stems from insufficient validation of the $api-description variable. An attacker could use this...

USN-4652-1: SniffIt vulnerability

It was discovered that SniffIt incorrectly handled certain configuration files. An attacker could possibly use this issue to execute arbitrary code...

CDFMonitor

NOTE : CDFMonitor is now deprecated, to capture trace as service use - https://support.citrix.com/article/CTX677255/citrix-cdfcontrol-as-service Please note: You can download the required file from the Citrix downloads website by visiting the following...

The vulnerability of the monitoring tool for the virtual infrastructure vRealize Operations, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the monitoring tool for the vRealize Operations virtual infrastructure is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the monitoring tool for the virtual infrastructure vRealize Operations lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the monitoring tool for the virtual infrastructure vRealize Operations is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

A New Free Monitoring Tool to Measure Your Dark Web Exposure

Last week, application security company ImmuniWeb released a new free tool to monitor and measure an organization's exposure on the Dark Web. To improve the decision-making process for cybersecurity professionals, the free tool crawls Dark Web marketplaces, hacking forums, and Surface Web resourc...

pomelo-monitor Command Injection Vulnerability

pomelo-monitor is a monitoring tool for operating systems and processes in nodejs. A command injection vulnerability exists in pomelo-monitor 0.3.7 and earlier versions. An attacker can exploit this vulnerability to inject arbitrary commands...

xymon buffer overflow vulnerability (CNVD-2019-29152)

xymon is an open source network monitoring application. A buffer overflow vulnerability exists in the appfeed.c file in xymon, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

Palantir's Surveillance Service for Law Enforcement

Motherboard got its hands on Palantir's Gotham user's manual, which is used by the police to get information on people: The Palantir user guide shows that police can start with almost no information about a person of interest and instantly know extremely intimate details about their lives. The...

Detect Evil Maid Attacks: Do Not Disturb

Physical access or “evil maid” attacks are some of the most insidious threats faced by those of us who travel with our Macs. Do Not Disturb DND is a free, open-source utility that aims to detect and alert you of such attacks! One of the best ways to compromise a computer is with physical access...

[SECURITY] Fedora 24 Update: i7z-0.27.2-16.20150629gitec09c4f.fc24

i7z is a CLI curses based monitoring tool for Intel Core i7, i5 and i3 processors...

[SECURITY] Fedora 23 Update: i7z-0.27.2-16.20150629gitec09c4f.fc23

i7z is a CLI curses based monitoring tool for Intel Core i7, i5 and i3 processors...

Facebook Helps Combat Apple XARA Vulnerabilities With Osquery

Apple may still be in the process of patching XARA, the series of weaknesses that surfaced in its authentication infrastructure last week, but Facebook has stepped up and made it easier for organizations to detect whether their system is being exploited by the vulnerabilities. Engineers with the...

Cisco Unified Communications Manager Real-Time Monitoring Tool File Disclosure Vulnerability

A vulnerability in the application programming interface API that supports the Real-Time Monitoring Tool RTMT in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access the contents of arbitrary files on an affected device. The vulnerability is due to a failur...

Path traversal

Absolute path traversal vulnerability in the Real-Time Monitoring Tool RTMT API in Cisco Unified Communications Manager CUCM allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414...

CVE-2014-8008

Absolute path traversal vulnerability in the Real-Time Monitoring Tool RTMT API in Cisco Unified Communications Manager CUCM allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414...

[SECURITY] Fedora 21 Update: thermostat-1.0.6-1.fc21

Thermostat is a monitoring and instrumentation tool for the Hotspot JVM, with support for monitoring multiple JVM instances. The system is made up of two processes: an Agent, which collects data, and a Client which allows users to visualize this data. These components communicate via a...

Directory traversal

Directory traversal vulnerability in the Real-Time Monitoring Tool RTMT in Cisco Unified Communications Manager CM 10.01 allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup57676...

CVE-2014-3319

Directory traversal vulnerability in the Real-Time Monitoring Tool RTMT in Cisco Unified Communications Manager CM 10.01 allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup57676...

Cisco Unified Communications Manager Real-Time Monitoring Tool Path Traversal Vulnerability

A vulnerability in the Real-Time Monitoring Tool RTMT of Cisco Unified Communications Manager Cisco Unified CM could allow an authenticated, remote attacker to download files from arbitrary locations on the filesystem. The vulnerability is due to insufficient input validation. An attacker could...