AT&T Facilitated NSA Surveillance Efforts

Telecommunication giant AT&T facilitated, to a larger degree than any other provider, the National Security Agency’s surveillance reach beyond domestic telephone data collection to email and Internet traffic, companion New York Times and ProPublica articles said on Saturday. It’s probably the...

Netsparker Cloud - Online Web Application Security Scanner

Netsparker Cloud is an online web application security scanner built around the advanced scanning technology of Netsparker Web Application Security Scanner; the only false positive free automated desktop based web vulnerability scanner. Benefit from the Cloud AFFORDABLE AND MAINTENANCE FREE WEB...

Cisco Prime Central for Hosted Collaboration Solution Cross-Site Scripting Vulnerability

Cisco Prime Central for Hosted Collaboration Solution PC4HCS is a carrier-grade, scalable service assurance management platform from Cisco. The platform provides secure access to authentication, real-time fault analysis and other functions. A cross-site scripting vulnerability exists in the...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2015-05103)

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. Cisco Unified Communications Manager 10.5 3.10000.9 has a security vulnerability in the implementation of the Prime Collaboration Deployment component, which can be exploited by an authenticated remot...

CVE-2015-4292

Cross-site scripting XSS vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.62 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuv45818...

CVE-2015-4292

Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(2) contains a cross-site scripting (XSS) vulnerability in its management interface caused by insufficient input filtering of user-submitted values. Exploitation would allow a remote attacker to inject arbitrary web script or HTML...

PT-2015-6505

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution PC4HCS version 10.62 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via an unspecified...

CVE-2015-4292: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.62 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuv45818...

CVE-2015-4295: Exposure of Sensitive Information to an Unauthorized Actor

The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.53.10000.9 allows remote authenticated users to discover root credentials via a direct request to an unspecified URL, aka Bug ID CSCuv21819...

PT-2015-1637

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 10.53.10000.9 Description The issue is related to the Prime Collaboration Deployment component, which lacks protection of internal data. This allows a remote authenticated user to discover root...

Cisco Unified Communications Manager Prime Collaboration Deployment Information Disclosure Vulnerability

A vulnerability in the Prime Collaboration Deployment of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protections of data at rest. An attacker could exploit this vulnerability by browsing to a...

Cisco Prime Central Hosted Collaboration Solution Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of the Cisco Prime Central for Hosted Collaboration Solution PC4HCS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability...

Burp Suite Professional v1.6.23 - The Leading Toolkit for Web Application Security Testing

Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security...

CVE-2015-1980

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors...

Cisco Prime Collaboration Assurance Web Interface Denial of Service Vulnerability

Cisco Prime Collaboration provides IT staff with a single unified management console for the vast majority of Cisco collaboration products. A security vulnerability in the Cisco Prime Collaboration Assurance Web interface allows remote users to submit special requests to destabilize the WEB...

CVE-2015-4280

Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service HTTP service outage via a crafted HTTP request, aka Bug ID CSCum38844...

Design/Logic Flaw

Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service HTTP service outage via a crafted HTTP request, aka Bug ID CSCum38844...

CVE-2015-4280

Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service HTTP service outage via a crafted HTTP request, aka Bug ID CSCum38844...

CVE-2015-4280

Cisco Prime Collaboration Assurance 10.0 is affected by CVE-2015-4280. The vulnerability arises from improper handling of crafted HTTP requests to the web interface, allowing a remote, unauthenticated attacker to cause the web UI to become unresponsive (DoS). Impact is described as partial availa...

CVE-2015-4280: Undefined Security Weakness

Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service HTTP service outage via a crafted HTTP request, aka Bug ID CSCum38844...