CVE-2013-6961: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Collaboration Partner Access Console CPAC in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36237...

[SECURITY] Fedora 19 Update: subversion-1.7.14-1.fc19

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

Zimbra Collaboration Server LFI

This module exploits a local file inclusion on Zimbra 8.0.2 and 7.2.2. The vulnerability allows an attacker to get the LDAP credentials from the localconfig.xml file. The stolen credentials allow the attacker to make requests to the service/admin/soap API. This can then be used to create an...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

A vulnerability in the Assurance component of Cisco Prime Collaboration could allow an unauthenticated, remote attacker to conduct several cross-site scripting XSS attacks against the user of the web interface of the affected system. The vulnerability is due to insufficient validation of user...

CVE-2013-6690

Multiple cross-site scripting XSS vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCui92643, CSCui94038, and CSCui94161...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCui92643, CSCui94038, and CSCui94161...

CVE-2013-6690

Multiple cross-site scripting XSS vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCui92643, CSCui94038, and CSCui94161...

CVE-2013-6690

CVE-2013-6690 affects the Cisco Prime Collaboration Assurance web interface. The vulnerability is an XSS due to insufficient input validation, enabling unauthenticated remote attackers to inject arbitrary client-side script via unspecified vectors (e.g., via malicious links or attacker-controlled...

Super 'Stuxnet' Malware development in progress to destroy Iran's nuclear program

Saudi Arabia and Israel's Mossad intelligence division are reportedly collaborating to develop a computer worm more destructive than the Stuxnet malware to spy on and destroy the software structure of Iran's nuclear program. The Iranian Fars news agency has reported: "Saudi spy chief Prince Banda...

PT-2013-6078

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web interface of the Assurance component. These vulnerabilities allow remote attackers to inject...

CVE-2013-6690: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCui92643, CSCui94038, and CSCui94161...

Microsoft and Google Collaborate on Effort to Clean Web of Cild Abuse Images

Microsoft and Google are cooperating in an effort to make it much more difficult for child predators to find illegal images online by blocking search results for about 100,000 search terms. The companies also are collaborating on methods to better identify illegal abuse images and remove them mor...

Internet Explorer zero-day vulnerability actively being exploited in the wild

Security researchers at FireEye have detected a new series of drive-by attacks based on a new Internet Explorer zero-day vulnerability. The attackers breached a website based in the US to deploy the exploit code to conduct a classic watering hole attack. The discovery was announced just a few day...

CVE-2013-5562

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...

CVE-2013-5562

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...

Code injection

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...

CVE-2013-5562

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...

CVE-2013-5562

CVE-2013-5562 affects the ITM web server in Cisco Prime Central for Hosted Collaboration Solution (HCS). A remote attacker can cause a denial-of-service (temporary HTTP service outage) by flooding the ITM port with TCP packets. Root cause is the ITM port’s inability to handle a TCP flood. Exploit...

PT-2013-5642

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution HCS affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a temporary HTTP service outage, by flooding the ITM web server...

CVE-2013-5562: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ITM web server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service temporary HTTP service outage via a flood of TCP packets, aka Bug ID CSCuh36313...