CVE-2014-1276

IOKit HID Event in Apple iOS before 7.1 allows attackers to conduct user-action monitoring attacks against arbitrary apps via a crafted app that accesses an IOKit framework interface...

Design/Logic Flaw

IOKit HID Event in Apple iOS before 7.1 allows attackers to conduct user-action monitoring attacks against arbitrary apps via a crafted app that accesses an IOKit framework interface...

CVE-2014-1276

CVE-2014-1276 affects Apple iOS prior to 7.1 via the IOKit HID Event interface. The vulnerability allows a crafted app to monitor user actions across arbitrary apps by accessing an IOKit framework interface, due to insufficient access controls in IOKit. Apple addressed this in iOS 7.1 (patch link...

Microsoft Internet Explorer CVE-2014-0308 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing 6...

Microsoft Windows Security Account Manager Remote protocol Security Bypass Vulnerability

Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and aid in brute-force attacks; other attacks may also be possible. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura...

HP SiteScope 'loadFileContents' SOAP请求远程代码执行漏洞

BUGTRAQ ID: 65972 CVECAN ID: CVE-2013-6207 HP SiteScope是无代理监控软件，可维护其分布式IT 基础架构的可用性和性能。 SiteScope 10.1x, 11.1x, 11.21版本的loadFileContents SOAP功能存在安全漏洞，成功利用后可导致任意代码执行、任意文件下载和拒绝服务。 0 HP SiteScope 11.21 HP SiteScope 11.1x HP SiteScope 10.1x 厂商补丁： HP -- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2014-0112

creationtimestamp| type| source ---|---|--- 2014-03-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41690 2014-05-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33142 2014-10-20 06:04:12+00:00| seen| MISP/5444a4b6-a7b8-41f0-8f49-45c7950d210b 2018-05-29...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 4, 2014

Medium Alert ID: 33197 First Published: 2014 March 5 19:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the attachment for...

Mobile Security Audit: zANTI

zANTI is a comprehensive network diagnostics toolkit that enables complex audits and penetration tests at the push of a button. It provides cloud-based reporting that walks you through simple guidelines to ensure network safety zANTI offers a host of penetration-testing features, including...

EMC RSA Data Loss Prevention不安全会话管理权限提升漏洞

BUGTRAQ ID: 65914 CVECAN ID: CVE-2014-0624 RSA Data Loss Prevention可以发现和监控敏感数据（如客户信用卡数据、员工 PII 或公司知识产权）的位置和流。 通过电子邮件、Web、PC、智能手机等培训终端用户并实施控制措施，防止敏感数据丢失。 RSA Data Loss Prevention 9.0, 9.5, 9.6, 9.6 SP1版本在实现上存在不安全的会话管理机制，这可使较低权限的用户访问高级别用户可以访问的内容。 0 EMC Data Loss Prevention 9.6 EMC Data Loss...

Fixing Trust Through Certificate Transparency

SAN FRANCISCO–The security of data being transmitted over the Web relies on a large number of moving parts, from the integrity of the machine sending the data, to the security of the browser, to the implementation of encryption, to the fragility of the certificate authority system. Experts have...

iOS 7 Bug Could Allow Background Monitoring

It’s only been a few days since Apple fixed the nasty certificate-validation “goto fail” vulnerability in iOS and OSX and now word comes that another bug, one that could allow an attacker to monitor keystrokes on iOS 7 devices without the user being any the wiser, also exists. The problem...

TCPTrack: Arbitrary code execution

Background TCPTrack is a simple libpcap based program for live TCP connection monitoring. Description A heap-based buffer overflow vulnerability exists in TCPTrack’s parsing of command line arguments. This is only a vulnerability in limited scenarios in which TCPTrack is “configured as a handler...

University Maryland Breach Exposes SocialSecurity numbers

Attackers breached a University of Maryland database containing more than 300,000 student, faculty, staff, and other affiliated records on Tuesday, according to an apology issued by the university’s president, Wallace D. Loh. While it is not clear exactly how many individuals are affected by the...

CVE-2014-0732

The Real Time Monitoring Tool RTMT web application in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495...

Authentication flaw

The Real Time Monitoring Tool RTMT web application in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495...

CVE-2014-0732

The Real Time Monitoring Tool RTMT web application in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495...

CVE-2014-0732

The CVE-2014-0732 issue affects Cisco Unified Communications Manager (Cisco Unified CM) RTMT web application (versions 10.0(1) and earlier). The root cause is insufficient authentication enforcement, permitting unauthenticated remote attackers to read RTMT files via a direct URL. Impact is inform...

PHPMyWind最新版SQL注射#1

简要描述： 通用型软件有奖励吗？怎么在重点应用跟一般应用都找不到PHPMyWind？？？ 详细说明： 在官网http://www.phpmywind.com/看了下，最新版是4.6.6，更新时间是13/11/28。去年知道创宇曾发布PHPMyWind三个SQL注入补丁→http://bbs.anquan.org/forum.php?mod=viewthread&tid=26575 本次报告的漏洞文件是order.php，上面的补丁包修复了order.php的31行的level，但是在374行的id却置之不理，因此漏洞产生了。 漏洞证明： 下载最新版PHPMyWind...

Cisco Unified Communications Manager Real Time Monitoring Tool Information Disclosure Vulnerability

A vulnerability in Real Time Monitoring Tool RTMT web application of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to access several files related to the RTMT application. The vulnerability is due to insufficient authentication enforcement. ...