Symantec Endpoint Protection Manager Reporting Server fw_charts.php Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Endpoint Protection. Authentication is not required to exploit this vulnerability. The specific flaw exists within the portion of the server that generates reports. Due to the combination ...

Mozilla Expands Bug Bounty to Web Apps

Mozilla has decided to follow the lead of Google and expand its bug-bounty program to pay for vulnerabilities found on certain of its Web sites, including the site for Firefox and the main Mozilla site. The group said that bounties for bugs found on the eligible sites will start at $500 and could...

Recent WikiLeaks-Related Cyberattacks Prompt Call for Policy Changes

In New York on Sunday, lawmakers urged President Obama to expand the U.S. State Department’s foreign policy mechanisms to address crime and security on the Internet. They cited recent attacks on companies severing ties with WikiLeaks as a main reason for these changes. At Symantec's New York City...

Dradis v2.6 - Tool for sharing information during security testing !

"Dradis is a tool for sharing information during security testing. While plenty of tools exist to help in the different stages of the test, not so many exist to share interesting information captured. When a team of testers is working on the same set of targets, having a common repository of...

Professional Penetration Testing Guide

Here is the another good book in the field of penetration testing. Unlike other books which aims only at the technical aspects of Penetration testing, this one explains every step involved in the making of a Professional Pentester. Rather than just teaching how to use the existing tools, it does...

BPConferenceReporting Web Reporting Authentication Bypass

Exploit for asp platform in category web applications ======================================================================= BPConferenceReporting Web Reporting Authentication Bypass Vulnerability ======================================================================= Author : v3n0m Site :...

BPConferenceReporting Web Reporting SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID -----------------------------------------------------------------------...

BPConferenceReporting Web Reporting - Authentication Bypass

BPConferenceReporting Web Reporting - Authentication Bypass / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

BPConferenceReporting Web Reporting - Authentication Bypass

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID -----------------------------------------------------------------------...

Nessus 4.4.0 New version release !

Finally, an updated version of Nessus is out after a long time! This is Nessus version 4.4.0 "The Nessus vulnerability scanner is the world-leader in active scanners, featuring high-speed discovery, configuration auditing, asset profiling, sensitive data discovery and vulnerability analysis of yo...

China Introduces New Laws to Combat Cyber Hacking

China is taking decisive action against computer hacking with a new law set to govern the sentencing of hackers and other internet offenders. This initiative, announced by the Ministry of Public Security, aims to enhance cybersecurity in response to the growing threat of cybercrime. Lawmakers are...

Verizon Debuts New App to Gather Anonymous Attack Data

As part of its continuing focus on collecting information on data breaches and thefts, Verizon Business has released VERIS Community application, a new application that enables security professionals to enter anonymous information about an incident and receive a detailed report in return. The...

Seccubus v1.5.3 - latest version download

"Tool to automatically fire regular security scans with Nessus. Compare results of the current scan with the previous scan and report on the delta in a web interface. Main objective of the tool is to make repeated scans more efficient." This is mostly a bugfix release. Download Seccubus v1.5.3...

Crystal Report Viewer 8.0.0.371 - ActiveX Denial of Service

Crystal Reporting Viewer v8.0.0.371 Author: Matthew Bergin Website: www.berginpentesting.com Website: www.smashthestack.org targetFile = "C:\WINDOWS\system32\crviewer.dll" prototype = "Sub SearchByFormula ByVal formula As String " memberName = "SearchByFormula" progid = "CRVIEWERLib.CRViewer"...

Cyber Crime Survey Finds Lots of Victims, Lots of Guilt

If you’ve fallen victim to a driveby download, phishing attack or virus laden PDF attachment, don’t despair: you’re in good company, according to a study sponsored by anti malware firm Symantec Corp. The anti virus software found that a whopping 73 percent of Internet users in the U.S. they...

Snort Report Detection

This host is running Snort Report. Snort Report is an add-on module for the Snort Intrusion Detection System. It provides realtime reporting from the MySQL database generated by Snort. OpenVAS Vulnerability Test $Id: gbsnortreportdetect.nasl 5736 2017-03-27 13:36:24Z cfi $ Snort Report Detection...

Splunk Free Detection

Splunk Free is running on the remote host. Splunk Free allows uncredentialed access, and anyone who connects will automatically be logged on as 'admin'. A remote attacker can exploit this to gain administrative access to the application. Splunk is a search, monitoring, and reporting tool for syst...

Splunk Management API Detection

The remote web server is an instance of the Splunk management API. Splunk is a search, monitoring, and reporting tool for system administrators. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49069; scriptversion"1.16";...

Fedora Update for zabbix FEDORA-2010-12752

Check for the Version of zabbix OpenVAS Vulnerability Test Fedora Update for zabbix FEDORA-2010-12752 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

California Bill Ups the Ante on Breach Notifications

The new bill requires that the company include the type of personal information exposed in the breach; the date or estimated date of the breach; a general description of the incident itself; and toll-free numbers and addresses for credit reporting agencies if the breach included social security...