Cyber Tool Estimates Incident Response Cost for Businesses

A thorough and freely available tool aims to help security professionals and executives anonymously tabulate the costs incurred on enterprises following all manner of cyber-incidents. Called CyberTab, the tool was created by The Economist Intelligence Unit and sponsored by the consulting firm Boo...

PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by application

It was identified that PicketBox/JBossSX allowed any deployed application to alter or read the underlying application server configuration and state without any authorization checks. An attacker able to deploy applications could use this flaw to circumvent security constraints applied to other...

Android Vulnerability: Install App Without User Explicit Consent

This vulnerability allows an app to install any number of apps with any type of permissions without user's explicit consent. It is based on two things: 1. You can install an app from Google Play using just the browser, even from PC. 2. An app can embed a browser and automatically login into your...

HP Rapid Deployment Pack / HP Insight Control Server Deployment multiple security vulnerabilities

Multiple different vulnerabilities...

CVE-2013-6205

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows local users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2013-6206

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2013-6206

HP Rapid Deployment Pack (RDP) and HP Insight Control Server Deployment are affected by CVE-2013-6206. The vulnerability enables remote attackers to obtain sensitive information, modify data, or trigger a denial of service via unknown vectors. CVSS v2 base score is 9.0 (HIGH) with Network attack ...

CVE-2013-6205

CVE-2013-6205 affects HP Rapid Deployment Pack (RDP) and HP Insight Control Server Deployment. The HP security bulletin (HPSBGN02970 rev.1) documents multiple remote vulnerabilities impacting confidentiality, integrity, and availability, with CVE-2013-6205 rated CVSS 2.0 base score 4.1 (AV:L/AC:M...

CVE-2013-6206

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2013-6205

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows local users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

Microsoft Internet Explorer内存破坏漏洞(CVE-2014-0309)

BUGTRAQ ID: 66034 CVECAN ID: CVE-2014-0309 Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer 没有正确访问内存对象，在实现上存在远程代码执行漏洞，成功利用后可破坏内存，在当前用户权限下执行任意代码。 0 Microsoft Internet Explorer 6-11 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS14-012）以及相应补丁: MS14-012：Cumulative Security Update for Internet...

Ganib 2.3 SQL Injection

Exploit title: Ganib 2.x SQLi Date: 02/02/2014 Exploit author: drone @dronesec More information: http://hatriot.github.io/blog/2014/02/24/ganib-project-management-2.3-sqli/ Vendor homepage: http://www.ganib.com/ Software link:...

[GoLismero v2.0] Merge results of security tools (OpenVas, Wfuzz, SQLMap, DNS recon, robot analyzer...)

GoLismero is an Open Source security tools that can run their own security tests and manage a lot of well known security tools OpenVas, Wfuzz, SQLMap, DNS recon, robot analyzer... take their results, feedback to the rest of tools and merge all of results. And all of this automatically. Changelog...

Scientific Linux Security Update : mysql55-mysql on SL5.x i386/x86_64 (20140218)

A buffer overflow flaw was found in the way the MySQL command line client tool mysql processed excessively long version strings. If a user connected to a malicious MySQL server via the mysql client, the server could use this flaw to crash the mysql client or, potentially, execute arbitrary code a...

CVE-2014-0018

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...

Design/Logic Flaw

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...

CVE-2014-0018

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...

[SECURITY] Fedora 19 Update: icedtea-web-1.4.2-0.fc19

The IcedTea-Web project provides a Java web browser plugin, an implementati on of Java Web Start originally based on the Netx project and a settings too l to manage deployment settings for the aforementioned plugin and Web Start implementations...

MS14-009 .NET Deployment Service IE Sandbox Escape

This module abuses a process creation policy in Internet Explorer's sandbox, specifically in the .NET Deployment Service dfsvc.exe, which allows the attacker to escape the Enhanced Protected Mode, and execute code with Medium Integrity. Module Options msf use exploit/windows/local/ms14/009iedfsvc...

[SECURITY] Fedora 20 Update: icedtea-web-1.4.2-0.fc20

The IcedTea-Web project provides a Java web browser plugin, an implementati on of Java Web Start originally based on the Netx project and a settings too l to manage deployment settings for the aforementioned plugin and Web Start implementations...