[SECURITY] Fedora 16 Update: moin-1.9.4-3.fc16

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

IBM Notes Client Detection

The remote host has IBM Notes installed. IBM Notes formerly IBM Lotus Notes is a business collaboration software client that connects to IBM Notes servers. This software has various capabilities including email, calendaring, and instant messaging. C Tenable Network Security, Inc...

Cortana scripting language introduced for Cobalt Strike and Armitage

At DEFCON 20, Raphael Mudge the developer of Armitage released the most significant update to Armitage. Armitage is now fully scriptable and capable of hosting bots in acollaborative hacking engagement. Raphael Mudge is the founder of Strategic Cyber LLC, a Washington, DC based company that creat...

Feds Show Up at DEF CON and Black Hat, But This Time to Talk, Not Snoop

LAS VEGAS–The Black Hat conference is now officially an adolescent, and like most in that age group, it has gone through some growing pains in its life. Once criticized for giving too much of a platform for offensive research, and then, after its sale a few years ago to a media conglomerate, ding...

Zimbra 7.2 NE & OSE 7.2 GA - Multiple Web Vulnerabilities

Document Title: =============== Zimbra 7.2 NE & OSE 7.2 GA - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=581 Release Date: ============= 2012-06-14 Vulnerability Laboratory ID VL-ID: ==================================== 5...

Zimbra 7.2 NE & OSE 7.2 GA - Multiple Web Vulnerabilities

Document Title: =============== Zimbra 7.2 NE & OSE 7.2 GA - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=581 Release Date: ============= 2012-06-14 Vulnerability Laboratory ID VL-ID: ==================================== 5...

[SECURITY] Fedora 17 Update: mozilla-https-everywhere-2.0.3-2.fc17

HTTPS Everywhere is a Firefox extension produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. It encrypts your communications with a number of major websites. Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to...

FastPath Webchat | Multiple Cross Site Scripting Vulnerabilities

OVERVIEW Fastpath WebChat is vulnerable to Cross Site Scripting. 2. BACKGROUND Fastpath WebChat is part of the Fastpath product. It provides a way for users to begin chatting with support agents using Fastpath. Fastpath is a plugin of OpenFire, a real time collaboration RTC server for instant...

EMC Documentum eRoom 7.33.498.98 Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple permanent cross-site scripting vulnerabilities product: EMC Documentum eRoom vulnerable version: 7.33.498.98 fixed version: 7.4.4 impact: high homepage:...

Cisco Security Advisory: Cisco Cius Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Cius Denial of Service Vulnerability Advisory ID: cisco-sa-20120229-cius Revision 1.0 For Public Release 2012 February 29 16:00 UTC GMT +-------------------------------------------------------------------- Summary...

Anonymous Retaliates for Arrests, Defaces Panda Labs

Hackers associated with the Anonymous and the Antisec movement claim to have compromised and defaced various Panda Labs’ websites earlier today. The hack comes one day after the news broke of the indictment of five core LulzSec hackers on various counts of hacking and other related charges. As...

Anonymous Sabu was working for FBI to Trace down other LulzSec hackers

Anonymous Sabu was working for FBI to Trace down other LulzSec hackers Police on two continents swooped on top members of computer hacking group LulzSec early today, and acting largely on evidence gathered by the organisation's leader "Sabu" who sources say has been secretly working for the...

CVE-2012-1213

Cross-site scripting XSS vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite ZCS 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter...

CVE-2012-1213

The CVE-2012-1213 issue affects Zimbra Collaboration Suite (ZCS) Web Client, specifically the zimbra/h/calendar component, with XSS in versions 6.x prior to 6.0.15 and 7.x prior to 7.1.3. The root cause is improper input handling of the view parameter in the calendar view, allowing remote attacke...

Open-Source Collaboration Framework: Dradis

Collaboration and reporting framework for InfoSec teams Some of the features: Platform independent Markup support for the notes: text styles, code blocks, images, links, etc. Integration with existing systems and tools: Brakeman Burp Suite MediaWiki Metasploit Nessus NeXpose Nikto Nmap OpenVAS...

irb, ruby security update

CentOS Errata and Security Advisory CESA-2012:0070 Updated ruby packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

Cisco Collaboration Server Source Code Disclosure Vulnerabilities

Cisco Collaboration Server is prone to multiple vulnerabilities that may allow remote attackers to obtain sourcecode, which may aid them in further attacks. Cisco Collaboration Server 5 is vulnerable; other versions may be affected as well. NOTE: The vendor has discontinued this product. OpenVAS...

Cisco Collaboration Server 'LoginPage.jhtml' Cross Site Scripting Vulnerability

Cisco Collaboration Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow t...

Cisco Collaboration Server 5 Source Code Disclosure Vulnerabilities - Active Check

Cisco Collaboration Server is prone to multiple vulnerabilities that may allow remote attackers to obtain sourcecode, which may aid them in further attacks. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Banks Coming Together To Fight Hackers, Prevent Attacks

Major banks like Morgan Stanley, Goldman Sachs Group and Bank of America are putting together plans to help identify new security threats before they happen, according to a report from the Wall Street Journal this week. The financial services firms will team up with the Polytechnic Institute of N...