IBOS enterprise collaboration management software the latest open source version of an SQL injection

No description provided by source...

IBOS enterprise collaboration management software the latest open source version of an SQL injection 2

No description provided by source...

CVE-2017-6792

A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root. The vulnerability is due to lack of input validation of the parameters in BatchFileName and Directory. An attacker coul...

CVE-2017-6793

The CVE-2017-6793 entry concerns Cisco Prime Collaboration Provisioning Tool, specifically its Inventory Management feature. A vulnerability arises from insufficient protection of restricted information, enabling an authenticated, remote attacker to view sensitive data through the user interface....

CVE-2017-6792

CVE-2017-6792 : Cisco Prime Collaboration Provisioning Tool’s batch provisioning feature is vulnerable due to lack of input validation of parameters in BatchFileName and Directory. An authenticated, remote attacker could exploit this to overwrite system files as root. Root cause and impact are de...

PT-2017-17325

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Tool affected versions not specified Description A vulnerability in the batch provisioning feature could allow an authenticated, remote attacker to overwrite system files as root. This issue is due to a...

CVE-2017-6793: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to view sensitive information on the system. The vulnerability is due to insufficient protection of restricted information. An attacker could exploit th...

CVE-2017-6792: Improper Input Validation

A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root. The vulnerability is due to lack of input validation of the parameters in BatchFileName and Directory. An attacker coul...

PT-2017-17326

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Tool affected versions not specified Description A vulnerability in the Inventory Management feature could allow an authenticated, remote attacker to view sensitive information on the system. This is due ...

Cisco Prime Collaboration Provisioning Tool Inventory Management Feature Information Disclosure Vulnerability

A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to view sensitive information on the system. The vulnerability is due to insufficient protection of restricted information. An attacker could exploit th...

Cisco Prime Collaboration Provisioning Tool System File Overwrite Vulnerability

A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root. The vulnerability is due to lack of input validation of the parameters in BatchFileName and Directory. An attacker coul...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of August 28, 2017

The only topic I can bring up this week is the devastation in Texas caused by Hurricane Harvey. Many cities have been completely destroyed and to add insult to injury, Harvey moved back to the Gulf of Mexico and made landfall again in Louisiana. Catastrophic flooding has left tens of thousands...

Managing Security in a DevOps Environment

DevOps is a software development practice in which development and operations engineers collaborate during the entire product lifecycle. With the adoption of DevOps at mainstream levels, we now see security starting to take a bigger role in DevOps’ day-to-day responsibilities. From a security...

Mobile WireX DDoS Botnet 'Neutralized' by Collaboration of Competitors

A collaboration between leading content delivery networks and technology companies—some of them competitors—is in the midst of shutting down the largest botnet of mobile devices ever recorded. The WireX botnet was detected on Aug. 17 after businesses in a number industries, most notably...

Tech Firms Team Up to Take Down ‘WireX’ Android DDoS Botnet

A half dozen technology and security companies -- some of them competitors -- issued the exact same press release today. This unusual level of cross-industry collaboration caps a successful effort to dismantle 'WireX,' an extraordinary new crime machine comprising tens of thousands of hacked...

The WireX Botnet: An example of cross-organizational cooperation

Introduction On August 17th, 2017, multiple Content Delivery Networks CDNs and content providers were subject to significant attacks from a botnet dubbed WireX. The botnet is named for an anagram for one of the delimiter strings in its command and control protocol. The WireX botnet comprises...

IBOS open source latest version of MailController.php page actionIndex function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionIndex function on the MailController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the...

IBOS Enterprise Collaboration Management Software PersonalController.php page actionAdd function has a file upload vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A file upload vulnerability exists in the actionAdd function on the PersonalController.php page of the IBOS Enterprise Collaboration Management Software. An attacker can exploit the...

IBOS Enterprise Collaboration Management Software AssignmentfinishedController.php page actionIndex function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. An SQL injection vulnerability exists in the actionIndex function on the AssignmentfinishedController.php page of IBOS Enterprise Collaboration Management Software. An attacker can exploit the...

Fuze Patches TPN Handset Vulnerabilties

Fuze, a maker of popular enterprise-grade voice-over-IP handsets, earlier this year patched three vulnerabilities that exposed user account information and enabled unauthorized authentication. The issues were made public today by researchers at Rapid7 who privately disclosed the flaws on April 12...