Syrian Electronic Army hacks U.S Central Command & threatens to leak Secret Documents

The Pro-hacker group, very well known as Syrian Electronic Army SEA aligned with president Bashar al-Assad, had recently taken down Forbes Website, sending a reminder to the international community that cyber warfare is alive and well, and this time the group has targeted U.S Central Command...

Fedora Update for quassel FEDORA-2014-1734

Check for the Version of quassel OpenVAS Vulnerability Test Fedora Update for quassel FEDORA-2014-1734 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2014-0730

Cisco Unified Computing System UCS Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt context, aka Bug ID CSCul53128...

CVE-2014-0730

Cisco UCS Central Software (UCS-Central) 1.1 and earlier is affected by a local-privesc flaw in the local-mgmt context. The issue stems from improper input validation in the copy command, allowing an authenticated local attacker to craft commands and gain shell-level access. Exploitation requires...

CVE-2014-0730

Cisco Unified Computing System UCS Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt context, aka Bug ID CSCul53128...

MediaWiki - 'Thumb.php' Remote Command Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'MediaWiki Thumb.php Remote Command Execution', 'Description' = %q MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5 and 1.19.x...

[EtherApe] A graphical network monitor

EtherApe is a graphical network monitor for Unix modeled after etherman. Featuring link layer, IP and TCP modes, it displays network activity graphically. Hosts and links change in size with traffic. Color coded protocols display. It supports Ethernet, FDDI, Token Ring, ISDN, PPP, SLIP and WLAN...

[SECURITY] Fedora 20 Update: puppet-3.4.2-1.fc20

Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...

EZGenerator跨站请求伪造漏洞

EZGenerator是一个网站建设和内容管理系统。 The application allows users to perform certain actions via HTTP requests without performing proper validity checks to verify the requests. This can be exploited to e.g. create an administrative account when a logged-in administrative user visits a specially crafted web...

ManageEngine Desktop Central AgentLogUploadServlet Arbitrary File Upload RCE (intrusive check)

The version of ManageEngine Desktop Central running on the remote host is affected by a remote code execution vulnerability due to a failure by the AgentLogUploadServlet script to properly sanitize user-supplied input to the 'fileName' parameter. A remote, unauthenticated attacker can exploit thi...

ManageEngine Desktop Central Default Administrator Credentials

The ManageEngine Desktop Central application running on the remote host uses a default set of credentials to control access to its management interface. An attacker can exploit this vulnerability to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

ManageEngine Endpoint Central Detection

Binary data manageenginedesktopcentraldetect.nbin...

ManageEngine Desktop Central AgentLogUploadServlet Arbitrary File Upload

The version of ManageEngine Desktop Central installed on the remote host is affected by an arbitrary file upload vulnerability due to the 'AgentLogUploadServlet' script not properly sanitizing user-supplied input to the 'filename' parameter. A remote, unauthenticated attacker can exploit this iss...

DesktopCentral AgentLogUpload Arbitrary File Upload Vulnerability

This Metasploit module exploits an arbitrary file upload vulnerability in DesktopCentral 8.0.0 below build 80293. A malicious user can upload a JSP file into the web root without authentication, leading to arbitrary code execution. This module requires Metasploit: http//metasploit.com/download...

ManageEngine Desktop Central < 8.0.293 Arbitrary File Upload Vulnerability

ManageEngine Desktop Central is prone to an arbitrary file upload vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ManageEngine Desktop Central AgentLogUpload Arbitrary File Upload

This module exploits an arbitrary file upload vulnerability in Desktop Central v7 to v8 build 80293. A malicious user can upload a JSP file into the web root without authentication, leading to arbitrary code execution as SYSTEM. Module Options msf use exploit/windows/http/desktopcentral/fileuploa...

CVE-2013-5562

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...

CVE-2013-5562

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...

Code injection

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...

CVE-2013-5562

CVE-2013-5562 affects the ITM web server in Cisco Prime Central for Hosted Collaboration Solution (HCS). A remote attacker can cause a denial-of-service (temporary HTTP service outage) by flooding the ITM port with TCP packets. Root cause is the ITM port’s inability to handle a TCP flood. Exploit...