393 matches found
SpiderFoot v2.6.1 - Open Source Intelligence Automation
SpiderFoot is an open source intelligence automation tool. Its goal is to automate the process of gathering intelligence about a given target. Purpose There are three main areas where SpiderFoot can be useful: 1. If you are a pen-tester, SpiderFoot will automate the reconnaisance stage of the tes...
AlienVault Unified Security Management av-forward Deserialization Remote Code Execution
A remote code execution vulnerability has been reported in AlienVault Unified Security Management, specifically the av-forward service. The vulnerability is due to deserialization of objects from untrusted sources. A remote unauthenticated attacker could exploit this vulnerability by sending a...
AlienVault Unified Security Management本地提权漏洞
No description provided by source...
AlienVault Unified Security Management远程代码执行漏洞
No description provided by source...
AlienVault Unified Security Management Remote Code Execution Vulnerability
AlienVault Unified Security Management USM is a security management platform from AlienVault, Inc. that provides security monitoring, security event management and reporting, and threat awareness systems. A remote code execution vulnerability exists in AlienVault USM. An attacker could exploit th...
AlienVault Unified Security Management Local Privilege Vulnerability
AlienVault Unified Security Management USM is a security management platform from AlienVault, Inc. that provides security monitoring, security event management and reporting, and threat awareness systems. A local boost vulnerability exists in AlienVault USM. A local attacker can exploit this...
How to Build a Successful Incident Response Plan
The fight to protect your company’s data isn’t for the faint of heart. As an embattled IT warrior, with more systems, apps, and users to support than ever before, keeping everything up and running is a battle in itself. When it comes to preventing the worst-case scenario from happening, you need...
AlienVault Unified Security Management Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges to root on vulnerable installations of AlienVault Unified Security Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the server and database. A local...
AlienVault OSSIM Cross-Site Request Forgery Vulnerability
AlienVault OSSIM is an open source security information management system. AlienVault OSSIM suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the targ...
AlienVault OSSIM 4.3 Cross Site Request Forgery
Exploit Title: AlienVault - ossim CSRF Date: 10-5-2015 Exploit Author: MohamadReza Mohajerani Vendor Homepage: www.alienvault.com Software Link: https://www.alienvault.com/products/ossim Version: Tested on 4.3 Vulnerability Details: ===================== Multiple CSRF vectors exists within...
How to Protect Yourself against XcodeGhost like iOS Malware Attacks
Recently, Chinese iOS developers have discovered a new OS X and iOS malware dubbed XcodeGhost that has appeared in malicious versions of Xcode, Apple’s official toolkit for developing iOS and OS X apps. The hack of Apple’s Xcode involves infecting the compiler with malware and then passing that...
Alienvault Open Source SIEM (OSSIM) 4.3 - Cross-Site Request Forgery
Alienvault Open Source SIEM OSSIM 4.3 - Cross-Site Request Forgery Exploit Title: AlienVault - ossim CSRF Date: 10-5-2015 Exploit Author: MohamadReza Mohajerani Vendor Homepage: www.alienvault.com Software Link: https://www.alienvault.com/products/ossim Version: Tested on 4.3 Vulnerability Detail...
Alienvault Open Source SIEM (OSSIM) 4.3 - Cross-Site Request Forgery
Exploit Title: AlienVault - ossim CSRF Date: 10-5-2015 Exploit Author: MohamadReza Mohajerani Vendor Homepage: www.alienvault.com Software Link: https://www.alienvault.com/products/ossim Version: Tested on 4.3 Vulnerability Details: ===================== Multiple CSRF vectors exists within...
How to Detect IE Zero-day Exploit Used to Deploy Korplug Malware
Recently, Microsoft issued an Emergency patch for a zero-day vulnerability in Internet Explorer that is being exploited to deploy Korplug malware on vulnerable PCs. Korplug, a known variant of PlugX, is a Trojan that creates a backdoor used for information stealing on infected computers. In one o...
FBI’s Cyber Task Force Identifies Stealthy FF-RATs used in Cyber Attack
In both April and June this year, a series of cyber attacks was conducted against the United States Office of Personnel Management OPM. These attacks resulted in 21 million current and former Federal government employees’ information being stolen. After months of investigation, the FBI’s Cyber Ta...
Volatile Cedar — Global Cyber Espionage Campaign Discovered
Security firm Check Point has uncovered what seems to be a successful, and long-running, cyber-surveillance campaign called “Volatile Cedar.” Check Point found that targets of the attack included, but were not limited to, defense contractors, media companies, telecommunications, and educational...
AlienVault OSSIM NBE Protocol SQL Injection Vulnerability
AlienVault OSSIM or Open Source Security Information Management is a popular open source security management system. AlienVault OSSIM handles the NBE protocol with an SQL injection vulnerability that allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries ...
AlienVault OSSIM NBE hostname/IP handling command execution vulnerability
AlienVault OSSIM or Open Source Security Information Management is a popular open source security management system. AlienVault OSSIM handles the existence of an input validation vulnerability in NBE hostname/IP, which allows remote attackers to exploit the vulnerability by submitting a specially...
AlienVault OSSIM NBE import hostname/IP cross-site scripting vulnerability
AlienVault OSSIM or Open Source Security Information Management is a popular open source security management system. AlienVault OSSIM handles NBE imported hostname/ip with a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious scripts or...
Alienvault OSSIM/USM Multiple Vulnerabilities
Details ======= Product: Alienvault OSSIM/USM Vulnerability: Multiple Vulnerabilities XSS, SQLi, Command Execution Author: Peter Lapp, [email protected] CVE: None assigned Vulnerable Versions: Tested on 4.14, 4.15, and 5.0. It likely affects all previous versions as well. Fixed Version: No fix ha...