1930 matches found
CVE-2010-0600: Undefined Security Weakness
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified configuration file, which...
Cisco Network Building Manager Vulnerabilities
Cisco has released a security advisory to address multiple vulnerabilities in Network Building Manager. The advisory indicates that the legacy Richards-Zeta Mediator products are also affected by these vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to operate with...
Cisco Network Building Mediator multiple security vulnerabilities
Default accounts, privilege escalation, unauthorized access...
Cisco Warns of Vulns in Building Systems
Cisco Systems has warned of serious vulnerabilities in a device that connects a building’s ventilation, lighting, security, and energy supply systems so they can be controlled by IT workers remotely. The networking giant urged users of the Cisco Network Building Mediator products to patch the...
Multiple Vulnerabilities in Cisco Network Building Mediator
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Botnet Herders Can Command Via Twitter
A security researcher has unearthed a tool that simplifies the process of building bot armies that take their marching orders from specially created Twitter accounts. Read the full article. The Register...
Cisco Network Building Mediator
Overview Cisco has identified multiple security vulnerabilitiesCisco, http://www.cisco.com/en/US/products/productssecurityadvisory09186a0080b2c518.shtml, website last visited May 27, 2010. in the Cisco Network Building Mediator NBM products. These vulnerabilities also affect the legacy...
Gary McGraw, Cigital
Like Geer, Gary has a unique view of the security world, one that is informed by his background in cognitive science and philosophy. He just doesn’t come at questions or problems the way that most people do, and that makes for interesting conversations. Gary’s among the top experts on software...
Gumblar: New Generation of Self-Building Botnets
We’ve been looking at the infrastructure of the Gumblar malware and found some curious facts on how Gumblar operates which we would like to share to make hosting owners aware of the Gumblar threat. Analysis of some infected websites showed that the only way to inject the infection of Gumblar was ...
Free Download Manager <= 3.0 Build 844 .torrent BOF Exploit
No description provided by source. !/usr/bin/perl Free Download Manager = 3.0 Build 844 .torrent BOF Exploit ----------------------------------------------------------- Exploit by SkD [email protected] Vendors URL = www.freedownloadmanager.org Download FDM 3.0 Build 844 =...
Fedora 8 : imlib2-1.4.2-2.fc8 (2008-10296)
Sun Nov 23 2008 Tomas Smetana 1.4.2-2 - patch for CVE-2008-5187 - Thu Oct 23 2008 Tomas Smetana 1.4.2-1 - new upstream version - Fri May 30 2008 Tomas Smetana 1.4.0-7 - patch for CVE-2008-2426 - Tue Mar 11 2008 Hans de Goede 1.4.0-6 - Disable amd64 assembly optimization. Kills idesk - 222998,...
Unfixed XSS vulnerability at www.yavuzbuilding.com
Security researcher SaMTHG, has submitted on 25/10/2008 a cross-site-scripting XSS vulnerability affecting www.yavuzbuilding.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is current...
MYPHP 4.0 企业建站系统上传漏洞
未能很好的过滤上传文件扩展而引起的上传漏洞 /adminc/downupload.php ====================================================================================== $downtype=".doc|.zip|.rar|.gif|.jpg|.jpeg|.png|.xls|.pdf|.ppt|.exe"; if !strstr$downtype, $imgtypetype echo "span class=txt请上传".$downtype."类型文件/span"; exit;...
CVE-2008-2165
Cross-site scripting XSS vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager BBSM Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2008-2165: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager BBSM Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
Cisco Building Broadband Service Manager Cross-Site Scripting Vulnerability
Cisco Building Broadband Service Manager BBSM 5.3 SP2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability exists due to an input validation error in certain web pages associated with the BBSM web...
Unfixed XSS vulnerability at www.buildingcentrebookshop.co.uk
Security researcher By Encore, has submitted on 11/04/2007 a cross-site-scripting XSS vulnerability affecting www.buildingcentrebookshop.co.uk, which at the time of submission ranked 5986668 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Online Web Building v2.0 (id) Remote SQL Injection
---------------------------------------------------------------------- Online Web Building v2.0 id Remote SQL Injection ----------------------------------------------------------------------- Bulan: xoron ----------------------------------------------------------------------- Download:...
Online Web Building 2.0 (id) Remote SQL Injection Vulnerability
No description provided by source. ---------------------------------------------------------------------- Online Web Building v2.0 id Remote SQL Injection ----------------------------------------------------------------------- Bulan: xoron...