2664 matches found
Sophos Web Protection Appliance 3.7.8.1 RCE
Remote command execution vulnerability in Sophos Web Protection Appliance Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
HP SiteScope runOMAgentCommand 11.20 RCE
Remote code execution vulnerability in HP SiteScope runOMAgentCommand Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
2013: The Security Year in Review
Dennis Fisher and Mike Mimoso talk about the year that was in the security industry, including the last six months of NSA drama, the Microsoft bug bounty program, exploit sales and attacks against major banks...
Cisco WebEx Sales Center开放重定向漏洞
Bugtraq ID:64284 CVE ID:CVE-2013-6967 Cisco WebEx是一款网络会议解决方案。 Cisco WebEx Sales Center存在开放重定向漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可重定向用户到攻击者指定WEB站点，进行网络钓鱼等攻击。 0 Cisco WebEx Sales Center 厂商补丁： Cisco ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Cisco WebEx Sales Center开放重定向漏洞
Bugtraq ID:64271 CVE ID:CVE-2013-6959 Cisco WebEx是一款网络会议解决方案。 Cisco WebEx Sales Center存在开放重定向漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可重定向用户到攻击者指定WEB站点，进行网络钓鱼等攻击。 0 Cisco WebEx Sales Center 厂商补丁： IBM ----- 用户可参考如下厂商提供的安全公告获得补丁信息： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-695...
Cisco WebEx Sales Center反射型跨站脚本漏洞
Bugtraq ID:64272 CVE ID:CVE-2013-6711 Cisco WebEx是一款网络会议解决方案。 Cisco WebEx Sales Center用于创建新产品的管理页面存在跨站脚本漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 Cisco WebEx Sales Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...
Cisco WebEx Sales Center Mobile Browser Open Redirect Vulnerability
A vulnerability in Cisco WebEx Sales Center could allow an unauthenticated, remote attacker to cause WebEx Sales Center to redirect mobile browsers to an attacker-supplied URL. The vulnerability is due to an open redirect issue in Cisco WebEx Sales Center. An attacker could exploit this...
CVE-2013-6959
Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557...
CVE-2013-6967
Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36020...
Open redirect
Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557...
CVE-2013-6959
Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557...
CVE-2013-6711
Cross-site scripting XSS vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul25540...
CVE-2013-6967
Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36020...
CVE-2013-6711
CVE-2013-6711 is a reflected cross-site scripting (XSS) vulnerability affecting the Cisco WebEx Sales Center product-creation admin page. The issue arises from insufficient input validation on the page used to create new products, allowing remote attackers to craft a URL that injects arbitrary we...
CVE-2013-6967
CVE-2013-6967 is an open-redirect flaw in Cisco WebEx Sales Center’s mobile browser subsystem that could let an unauthenticated, remote attacker lure users to attacker-controlled URLs, enabling phishing. Affected product: Cisco WebEx Sales Center (mobile browser component). Root cause: open redir...
CVE-2013-6959
Cisco WebEx Sales Center contains an open redirect vulnerability (CVE-2013-6959). An unauthenticated, remote attacker could craft a URL that redirects users to an attacker-specified site, enabling phishing. The issue stems from an open redirect flaw in WebEx Sales Center, and Cisco’s advisory not...
Cisco WebEx Sales Center Reflected Cross-Site Scripting Vulnerability
A vulnerability in the administrative page for creating a new product in Cisco WebEx Sales Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit thi...
Cisco WebEx Sales Center Open Redirect Vulnerability
A vulnerability in Cisco WebEx Sales Center could allow an unauthenticated, remote attacker to cause WebEx Sales Center to issue a redirect to an arbitrary attacker-supplied URL. The vulnerability is due to an open redirect issue in Cisco WebEx Sales Center. An attacker could exploit this...
vBulletin 5.x Remote Administrator Injection
Remote administrator injection vulnerability in vBulletin upgrade.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...