CVE-2014-8516

creationtimestamp| type| source ---|---|--- 2014-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35211 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/visualminingnetchartsupload.rb 2025-02-06...

ManageEngine OpManager / Social IT Plus / IT360 File Upload / SQL Injection

Hi, This is the 8th part of the ManageOwnage series. For previous parts see 1. This time we have a file upload leading to remote code execution and a blind SQL injection in ManageEngine OpManager, Social IT Plus and IT360. ManageEngine have released an emergency fix, see details in the advisory...

ManageEngine OpManager Social IT Plus IT360 - Multiple Vulnerabilities

ManageEngine OpManager Social IT Plus IT360 - Multiple Vulnerabilities Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security ==========================================================================...

Michael Chertoff Risk Management ACSC Keynote

BOSTON – Former Homeland Security secretary Michael Chertoff gave enterprises a pep talk Wednesday during his keynote address at the Advanced Cyber Security Center’s annual conference. In a climate where massive financial services organizations such as JP Morgan Chase have been breached, the Whit...

Popular secure chat APP TextSecure presence of“unknown key sharing attack”vulnerability-vulnerability warning-the black bar safety net

! TextSecure is Android platform a encrypted chat APP, this free APP is designed in order to guarantee communication privacy. This APP by Open WhisperSystems developed, the code completelyopen sourcesupport end-to-end SMS encryption. Looks very safe is not? Recently, however, from Germany's Ruhr...

Dell SonicWall GMS v7.2.x - Persistent Web Vulnerability

Document Title: =============== Dell SonicWall GMS v7.2.x - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1222 Release Date: ============= 2014-10-21 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2011-4369

creationtimestamp| type| source ---|---|--- 2014-10-31 17:12:11+00:00| seen| MISP/5446255a-2534-4cb0-9784-8aa6950d210b 2014-11-24 09:28:52+00:00| seen| MISP/5472f4a5-eafc-43c4-91b1-4bfe950d210b 2015-02-18 10:45:37+00:00| seen| MISP/54e46b9d-670c-407c-b916-4914950d210b 2020-04-20 18:16:14+00:00|...

IBM Tivoli Monitoring 6.2.2 kbbacf1 Privilege Escalation

!/bin/sh Title: IBM Tivoli Monitoring V6.2.2 kbbacf1 privilege escalation exploit CVE: CVE-2013-5467 Vendor Homepage: http://www-03.ibm.com/software/products/pl/tivomoni Author: Robert Jaroszuk Tested on: RedHat 5, Centos 5 Vulnerable version: IBM Tivoli Monitoring V6.2.2 other versions not teste...

IBM Tivoli Monitoring 6.2.2 kbbacf1 - Privilege Escalation Exploit

Exploit for linux platform in category local exploits !/bin/sh Title: IBM Tivoli Monitoring V6.2.2 kbbacf1 privilege escalation exploit CVE: CVE-2013-5467 Vendor Homepage: http://www-03.ibm.com/software/products/pl/tivomoni Author: Robert Jaroszuk Tested on: RedHat 5, Centos 5 Vulnerable version:...

IBM Tivoli Monitoring 6.2.2 kbbacf1 - Local Privilege Escalation

!/bin/sh Title: IBM Tivoli Monitoring V6.2.2 kbbacf1 privilege escalation exploit CVE: CVE-2013-5467 Vendor Homepage: http://www-03.ibm.com/software/products/pl/tivomoni Author: Robert Jaroszuk Tested on: RedHat 5, Centos 5 Vulnerable version: IBM Tivoli Monitoring V6.2.2 other versions not teste...

IBM Tivoli Monitoring 6.2.2 kbbacf1 - Local Privilege Escalation

IBM Tivoli Monitoring 6.2.2 kbbacf1 - Local Privilege Escalation !/bin/sh Title: IBM Tivoli Monitoring V6.2.2 kbbacf1 privilege escalation exploit CVE: CVE-2013-5467 Vendor Homepage: http://www-03.ibm.com/software/products/pl/tivomoni Author: Robert Jaroszuk Tested on: RedHat 5, Centos 5 Vulnerab...

WirelessNetView - Wireless Network Monitoring Tool

WirelessNetView is a small utility that runs in the background, and monitor the activity of wireless networks around you. For each detected network, it displays the following information: SSID, Last Signal Quality, Average Signal Quality, Detection Counter, Authentication Algorithm, Cipher...

Broken shell Vulnerability, CVE-2 0 1 4-6 2 7 1 Integrated analysis:“break the shell”loophole series analysis of two-vulnerability and early warning-the black bar safety net

A“broken shell”vulnerability overview Our team in 9 months 2 5, 1 0 when released the“break the shell”VulnerabilityCVE-2 0 1 4-6 2 7 1A comprehensive analysis of, and update multiple versions. In this process, we monitor the collection and sample Exchange System, found a lot to exploit the...

Operation DeathClick APT Malvertising Campaign

Advanced persistent threat groups are using malvertising in order to compromise the networks of their adversaries in what appears to be an example of high-level, nation-state attackers borrowing tactics from the typically less sophisticated cybercriminal arsenals. Attackers are also borrowing fro...

CVE-2014-3679

The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages...

Information disclosure

The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages...

CVE-2014-3679

CVE-2014-3679 affects the Jenkins Monitoring plugin prior to 1.53.0. The issue is an information-disclosure flaw where certain Monitoring plugin pages are accessible to remote attackers, allowing them to obtain sensitive information. Affected: Jenkins Monitoring plugin (pre-1.53.0). Root cause: p...

CVE-2014-3679

The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages...

Kmart Latest Retail Chain to Disclose Payment Card Breach

Kmart is the latest domino to fall in the seemingly endless streak of major retail chain breaches. The discount department store acknowledged on Friday that it fell victim to a “payment security incident” for most of September and some of October. The store, which is operated by Sears Holdings...

jenkins: cross-site scripting flaws in the monitoring plug-in (SECURITY-113)

Cross-site scripting XSS vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...