xymon buffer overflow vulnerability (CNVD-2019-29152)

xymon is an open source network monitoring application. A buffer overflow vulnerability exists in the appfeed.c file in xymon, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

Palantir's Surveillance Service for Law Enforcement

Motherboard got its hands on Palantir's Gotham user's manual, which is used by the police to get information on people: The Palantir user guide shows that police can start with almost no information about a person of interest and instantly know extremely intimate details about their lives. The...

Detect Evil Maid Attacks: Do Not Disturb

Physical access or “evil maid” attacks are some of the most insidious threats faced by those of us who travel with our Macs. Do Not Disturb DND is a free, open-source utility that aims to detect and alert you of such attacks! One of the best ways to compromise a computer is with physical access...

[SECURITY] Fedora 24 Update: i7z-0.27.2-16.20150629gitec09c4f.fc24

i7z is a CLI curses based monitoring tool for Intel Core i7, i5 and i3 processors...

[SECURITY] Fedora 23 Update: i7z-0.27.2-16.20150629gitec09c4f.fc23

i7z is a CLI curses based monitoring tool for Intel Core i7, i5 and i3 processors...

Facebook Helps Combat Apple XARA Vulnerabilities With Osquery

Apple may still be in the process of patching XARA, the series of weaknesses that surfaced in its authentication infrastructure last week, but Facebook has stepped up and made it easier for organizations to detect whether their system is being exploited by the vulnerabilities. Engineers with the...

Cisco Unified Communications Manager Real-Time Monitoring Tool File Disclosure Vulnerability

A vulnerability in the application programming interface API that supports the Real-Time Monitoring Tool RTMT in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access the contents of arbitrary files on an affected device. The vulnerability is due to a failur...

Path traversal

Absolute path traversal vulnerability in the Real-Time Monitoring Tool RTMT API in Cisco Unified Communications Manager CUCM allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414...

CVE-2014-8008

Absolute path traversal vulnerability in the Real-Time Monitoring Tool RTMT API in Cisco Unified Communications Manager CUCM allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414...

[SECURITY] Fedora 21 Update: thermostat-1.0.6-1.fc21

Thermostat is a monitoring and instrumentation tool for the Hotspot JVM, with support for monitoring multiple JVM instances. The system is made up of two processes: an Agent, which collects data, and a Client which allows users to visualize this data. These components communicate via a...

Directory traversal

Directory traversal vulnerability in the Real-Time Monitoring Tool RTMT in Cisco Unified Communications Manager CM 10.01 allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup57676...

CVE-2014-3319

Directory traversal vulnerability in the Real-Time Monitoring Tool RTMT in Cisco Unified Communications Manager CM 10.01 allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup57676...

Cisco Unified Communications Manager Real-Time Monitoring Tool Path Traversal Vulnerability

A vulnerability in the Real-Time Monitoring Tool RTMT of Cisco Unified Communications Manager Cisco Unified CM could allow an authenticated, remote attacker to download files from arbitrary locations on the filesystem. The vulnerability is due to insufficient input validation. An attacker could...

Design/Logic Flaw

The Real Time Monitoring Tool RTMT implementation in Cisco Unified Communications Manager Unified CM allows remote authenticated users to 1 read or 2 delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199...

CVE-2014-3292

The vulnerability CVE-2014-3292 affects Cisco Unified Communications Manager (CUCM) RTMT, where insufficient input validation in RTMT allows an authenticated, remote attacker to read or delete arbitrary files via crafted HTTP requests. Affected component: Real-Time Monitoring Tool (RTMT) within C...

CVE-2014-3292

The Real Time Monitoring Tool RTMT implementation in Cisco Unified Communications Manager Unified CM allows remote authenticated users to 1 read or 2 delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199...

CVE-2014-0732

The Real Time Monitoring Tool RTMT web application in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495...

Authentication flaw

The Real Time Monitoring Tool RTMT web application in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495...

CVE-2014-0732

The Real Time Monitoring Tool RTMT web application in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495...

CVE-2014-0732

The CVE-2014-0732 issue affects Cisco Unified Communications Manager (Cisco Unified CM) RTMT web application (versions 10.0(1) and earlier). The root cause is insufficient authentication enforcement, permitting unauthenticated remote attackers to read RTMT files via a direct URL. Impact is inform...