CVE-2014-6197

CVE-2014-6197 affects IBM Security Network Protection (XGS) models 3100, 4100, 5100, 7100. The vulnerability is a remote clickjacking issue that could allow an attacker to hijack a victim’s clicks when visiting a malicious page. Affected firmware versions include 5.1, 5.1.1, 5.1.2, 5.1.2.1, 5.2, ...

CVE-2014-6197

IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-6183

IBM Security Network Protection 5.1 before 5.1.0.0 FP13, 5.1.1 before 5.1.1.0 FP8, 5.1.2 before 5.1.2.0 FP9, 5.1.2.1 before FP5, 5.2 before 5.2.0.0 FP5, and 5.3 before 5.3.0.0 FP1 on XGS devices allows remote authenticated users to execute arbitrary commands via unspecified vectors...

Design/Logic Flaw

IBM Security Network Protection 5.1 before 5.1.0.0 FP13, 5.1.1 before 5.1.1.0 FP8, 5.1.2 before 5.1.2.0 FP9, 5.1.2.1 before FP5, 5.2 before 5.2.0.0 FP5, and 5.3 before 5.3.0.0 FP1 on XGS devices allows remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2014-6183

IBM Security Network Protection 5.1 before 5.1.0.0 FP13, 5.1.1 before 5.1.1.0 FP8, 5.1.2 before 5.1.2.0 FP9, 5.1.2.1 before FP5, 5.2 before 5.2.0.0 FP5, and 5.3 before 5.3.0.0 FP1 on XGS devices allows remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2014-6183

CVE-2014-6183 affects IBM Security Network Protection (XGS) models 3100/4100/5100/7100. A remote authenticated attacker could inject and execute arbitrary shell commands due to a shell command injection vulnerability in firmware ranges 5.1, 5.1.1, 5.1.2, 5.1.2.1, 5.2, and 5.3. Remediation consist...

[BlackArch] Linux Distribution with 600 Security Tools

BlackArch Linux is a lightweight expansion to Arch Linux for penetration testers and security researchers. The repository contains 630 tools. You can install tools individually or in groups. BlackArch is compatible with existing Arch installs. Tool List: Name | Version | Description | Homepage...

CVE-2013-5442

Cross-site scripting XSS vulnerability in the Local Management Interface LMI in IBM Security Network Protection on XGS 5100 devices with firmware 5.1 before 5.1.0.6 and 5.1.1 before 5.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5442

CVE-2013-5442 is an XSS vulnerability affecting the Local Management Interface (LMI) of IBM Security Network Protection on XGS 5100 devices running firmware 5.1 and 5.1.1 (prior to 5.1.0.6 and 5.1.1.1, respectively). The issue allows remote attackers to inject arbitrary web script or HTML via uns...

CVE-2013-5442

Cross-site scripting XSS vulnerability in the Local Management Interface LMI in IBM Security Network Protection on XGS 5100 devices with firmware 5.1 before 5.1.0.6 and 5.1.1 before 5.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

afd

This plugin sends custom requests to the remote web server in order to verify if the remote network is protected by an IPS or WAF. afd plugin detects both TCP-Connection-reset and HTTP level filters, the first one usually implemented by IPS devices is easy to verify: if afd requests the custom pa...

Once there was a Privacy! Cyber Security bill #CISPA passed

The United States House of Representatives on Thursday voted to approve the highly controversial cyber security bill CISPA, which stands for the Cyber Intelligence Sharing and Protection Act. The Bill called the Cyber Intelligence Sharing and Protection Act CISPA was presented under the guise...

Cyber threats a major risk to business

When it comes to security, small and midsize businesses are largely unaware of the risks they face. Cybercrime is a serious problem which affects businesses of all sizes and can have devastating consequences. U.S. small businesses should understand they cannot completely remain safe from...

Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities

Document Title: =============== Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=569 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 569...

Dino Dai Zovi: Attacker Math

In his keynote address at the SOURCE Boston conference this year, independent security researcher Dino Dai Zovi discussed the attacker mentality and they way that defenders can adopt it to better protect their networks...

Barracuda Spam & Virus Firewall Console Management Detection

The remote host appears to be a Barracuda Spam & Virus Firewall. It allows connections to its web console management application. Letting attackers know the type of firewall in use may help them focus their attacks against the networks it protects. C Tenable Network Security, Inc...

Malicious File Upload

The application server accepted a vbscript file, an HTML file containing JavaScript, and the EICAR test virus as allowed attachments. This means that an attacker could submit a malicious file to the backend, where the file might be launched by another internal RIM employee if they click and open...

DSA-1605-1 glibc - DNS cache poisoning

Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS spoofing and cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. At this time, it is not possible to implement the recommended...

squid -- DNS lookup spoofing vulnerability

The squid patches page notes: Malicious users may spoof DNS lookups if the DNS client UDP port random, assigned by OS as startup is unfiltered and your network is not protected from IP spoofing...

Blue Coat ProxySG Console Management Detection

The remote host appears to be a Blue Coat ProxySG appliance, an enterprise-class firewall, and it allows connections to its web console management application. Letting attackers know the type of firewall in use may help them focus their attacks against the networks it protects. C Tenable Network...