142 matches found
What About the Plant Floor? Six Subversive Concerns for ICS Environments
Industrial enterprises such as electric utilities, petroleum companies, and manufacturing organizations invest heavily in industrial control systems ICS to efficiently, reliably, and safely operate industrial processes. Without this technology operating the plant floor, these businesses cannot...
Uber: Stored XSS in developer.uber.com
An attacker can make a series of requests to https://uber.readme.io/ that will result in permanent defacement/stored XSS of all the documentation pages on https://developer.uber.com/ I'm not entirely sure if this is in scope, but it could definitely have a major impact on developer.uber.com so I...
(0Day) Advantech WebAccess Local Escalation Of Privilege Vulnerability
This vulnerability allows local users to elevate to administrator status on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Loadbalancer.org Enterprise VA 7.5.2 - Static SSH Key
----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Loadbalancer.org Enterprise VA 7.5.2 and below ------------------------- Affected vendors: ------------------------- Loadbalancer.org http://www.loadbalancer.org/...
VMware Workstation 8.x < 8.0.5 Multiple Vulnerabilities (VMSA-2012-0015)
The VMware Workstation 8.x install detected on the remote host is earlier than 8.0.5 and is, therefore, potentially affected by the following vulnerabilities : - Certain processes, when created, have weak security permissions assigned. It is possible to commandeer these process threads, which cou...
VMware Player 4.x < 4.0.5 Multiple Vulnerabilities (VMSA-2012-0015)
The VMware Player 4.x install detected on the remote host is earlier than 4.0.5 and is, therefore, potentially affected by the following vulnerabilities : - Certain processes, when created, have weak security permissions assigned. It is possible to commandeer these process threads, which could...
Update: Hacking Group TeaMp0isoN Claims Breach of T-Mobile
The hacking group TeaMp0isoN claims to have compromised Web servers used by T-Mobile, and absconded with account information for company employees, including members of T-Mobile’s media team. The group used a post on its official Twitter account taking responsibility for the attack, which targete...
ZOHO ManageEngine ADSelfService multiple vulnerabilities
Core Security Technologies - Corelabs Advisory ZOHO ManageEngine ADSelfService multiple vulnerabilities 1. Advisory Information Title: ZOHO ManageEngine ADSelfService multiple vulnerabilities Advisory ID: CORE-2011-0103 Advisory URL:...
Panda Global Protection / Panda Internet Security weak security permissions
Weak permissions for executable files...
Kaspersky Lab Multiple products privilege escalation
BASES directory contains executable files and has weak security permissions...
Rising Antivirus / Firewall weak security permissions
Weak permissions for program executables and services...
TrustPort Antivirus / TrustPort PC Security weak security permissions
Weak permissions for program files...
FreeBSD : typo3 -- multiple vulnerabilities (653606e9-f6ac-11dd-94d9-0030843d3802)
Secunia reports : Some vulnerabilities have been reported in Typo3, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and session fixation attacks, and compromise a vulnerable system. The 'Install tool' system extension uses...
CVE-2008-2019
Simple Machines Forum SMF, probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file aka audio CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances. NOTE: this issue reportedly exists...
Adobe air weak security model design
Application restrictions are not enforced...
Microsoft Windows Vista weak security permissions
Weak permissions for files and registry entries...
Cisco Router Web Setup weak default security settings
By default it's possible to access IOS Web interface without authentication with highest access security level...
Knox Arkeia Network Backup multiple vulnerabilities
Database files and password file have weak security premossions by default. Default root password is empty. Buffer overflow...
DUWare Multiple Products - Multiple Vulnerabilities
DUWare Multiple Vulnerabilities Vendor: DUWare Product: DUWare Version: Multiple Products Website: http://www.duware.com/ BID: 9246 Description: DUportal Pro is a professional Web portal and online community. DUportal Pro contains numerous advanced features such as Web-based administration,...
MySQL 3.x4.0.x - Weak Password Encryption
MySQL 3.x4.0.x - Weak Password Encryption // source: https://www.securityfocus.com/bid/7500/info MySQL has been reported to implement a weak password encryption algorithm. It has been reported that the MySQL function used to encrypt MySQL passwords makes just one pass over the password and employ...