EMC M&R (Watch4net) Insecure Credential Storage

------------------------------------------------------------------------ EMC M&R Watch4net data storage collector credentials are not properly protected ------------------------------------------------------------------------ Han Sahin, November 2014...

EMC MR (Watch4net) - Credential Disclosure

EMC MR Watch4net - Credential Disclosure Abstract It was discovered that EMC M&R Watch4net credentials of remote servers stored in Watch4net are encrypted using a fixed hardcoded password. If an attacker manages to obtain a copy of the encrypted credentials, it is trivial to decrypt them. Affecte...

EMC M&R (Watch4net) - Credential Disclosure

Abstract It was discovered that EMC M&R Watch4net credentials of remote servers stored in Watch4net are encrypted using a fixed hardcoded password. If an attacker manages to obtain a copy of the encrypted credentials, it is trivial to decrypt them. Affected products EMC reports that the following...

EMC MR (Watch4net) - Directory Traversal

EMC MR Watch4net - Directory Traversal Abstract A path traversal vulnerability was found in EMC M&R Watch4net Device Discovery. This vulnerability allows an attacker to access sensitive files containing configuration data, passwords, database records, log data, source code, and program scripts an...

PC-Man-FTP-Server

Title: PCMan FTP Server v2.0.7 Buffer Overflow - MKD Command Date : 12/02/2015 Author: R-73eN Software: PCMan FTP Server v2.0.7 Tested On Windows Xp SP3...

[SECURITY] Fedora 20 Update: unzip-6.0-17.fc20

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-004: EMC M&R Watch4Net Multiple Vulnerabilities EMC Identifier: ESA-2015-004 CVE Identifier: CVE-2015-0513, CVE-2015-0514, CVE-2015-0515, CVE-2015-0516, CVE-2014-4288, CVE-2014-6456, CVE-2014-6457, CVE-2014-6458, CVE-2014-6466, CVE-2014-6468,...

Police Using High-Tech Device to See Through Walls Warrantlessly

We are all aware of the mass surveillance conducted by the government agencies on us. From our phone calls, emails to web activities, chats and social network activities, everything has been interrupted by the law enforcements. And now they have crossed every limits by using a new way to spy on...

CVE-2015-0516

Directory traversal vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2015-0515

Unrestricted file upload vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file...

CVE-2015-0514

EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM access to conduct a decryption attack...

CVE-2015-0513

Multiple cross-site scripting XSS vulnerabilities in the administrative user interface in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafted values of unspecified field...

Directory traversal

Directory traversal vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL...

Design/Logic Flaw

EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM access to conduct a decryption attack...

Unrestricted file upload

Unrestricted file upload vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the administrative user interface in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafted values of unspecified field...

CVE-2015-0516

Directory traversal vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2015-0515

Unrestricted file upload vulnerability in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file...

CVE-2015-0514

EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM access to conduct a decryption attack...

CVE-2015-0516

EMC M&R (Watch4Net) path traversal vulnerability CVE-2015-0516 affects EMC M&R/Watch4Net prior to 6.5u1 and EMC ViPR SRM prior to 3.6.1. An authenticated user can manipulate URLs to read arbitrary files on the system via the MIB Browser/Device Discovery interfaces. Root cause is a directory trave...