IT-Grundschutz M5.009: Protokollierung am Server

IT-Grundschutz M5.009: Protokollierung am Server. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM5009.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 5.009 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks GmbH,...

IT-Grundschutz M4.052: Geräteschutz unter NT-basierten Windows-Systemen

IT-Grundschutz M4.052: Geräteschutz unter NT-basierten Windows-Systemen. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4052.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.052 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone...

IT-Grundschutz M4.338: Einsatz von File und Registry Virtualization bei Clients ab Windows Vista

IT-Grundschutz M4.338: Einsatz von File und Registry Virtualization bei Clients ab Windows Vista. Stand: 15. Ergänzungslieferung 15. EL. Hinweis: Nur ein genereller Test, ob Vista File und Registry Virtualization aktiviert ist. OpenVAS Vulnerability Test $Id: GSHBM4338.nasl 8004 2017-12-06...

IT-Grundschutz, 15. EL

Zusammenfassung von Tests gemäß der IT-Grundschutz Kataloge mit Stand 15. Ergänzungslieferung. Diese Routinen prüfen sämtliche Maßnahmen des IT-Grundschutz des Bundesamts für Sicherheit in der Informationstechnik BSI auf den Zielsystemen soweit die Maßnahmen auf automatisierte Weise abgeprüft...

IT-Grundschutz M4.022: Verhinderung des Vertraulichkeitsverlusts schutzbedürftiger Daten im Unix-System

IT-Grundschutz M4.022: Verhinderung des Vertraulichkeitsverlusts schutzbedürftiger Daten im Unix-System. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4022.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.022 Authors: Thomas Rotter Copyright:...

IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten

IT-Grundschutz M4.288: Sichere Administration von VoIP-Endgeräten. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4288.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.288 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks...

IT-Grundschutz M4.227: Einsatz eines lokalen NTP-Servers zur Zeitsynchronisation

IT-Grundschutz M4.227: Einsatz eines lokalen NTP-Servers zur Zeitsynchronisation. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4227.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.227 Authors: Thomas Rotter Copyright: Copyright c 2015...

IT-Grundschutz M5.145: Sicherer Einsatz von CUPS

IT-Grundschutz M5.145: Sicherer Einsatz von CUPS. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Th...

IT-Grundschutz M4.080: Sichere Zugriffsmechanismen bei Fernadministration

IT-Grundschutz M4.080: Sichere Zugriffsmechanismen bei Fernadministration. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions

It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute...

JSF: XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions

It was found that Mojarra JavaServer Faces did not properly escape user-supplied content in certain circumstances. Contents of outputText tags and raw EL expressions that immediately follow script or style elements were not escaped. A remote attacker could use a specially crafted URL to execute...

CVE-2014-6914

The Houcine El Jasmi aka com.devkhr31.houcineeljasmi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Houcine El Jasmi aka com.devkhr31.houcineeljasmi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6914

CVE-2014-6914 affects the Android app Houcine El Jasmi (package com.devkhr31.houcineeljasmi) version 1.0, which does not verify X.509 certificates when validating SSL servers. This allows man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. CVSS...

CVE-2014-6914

The Houcine El Jasmi aka com.devkhr31.houcineeljasmi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Cross site scripting

Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a 1 tag or 2 EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting XSS attacks via application-specific vectors...

Pligg CMS (story.php?id) 1.0.4 - SQL Injection Vulnerability

No description provided by source. / ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor :...

CH-CMS.ch-V2 Upload Vulnerability

No description provided by source. ======================================================================================== | Title CH-CMS.ch-V2 Upload Vulnerability | Author El-Kahina | email please forgive me $ | Web Site http://kewlshare.com/dl/f1b6b4d587ab/95Final2bugfixinstall.rar.html $ |...

Torrent Hoster Remont Upload Exploit

No description provided by source. ======================================================================================== | Title : Torrent Hoster Remont Upload Exploit | Author : El-Kahina | Home : www.h4kz.com | | Script : Powered by Torrent Hoster. | Tested on: windows SP2 Franais V.Pnx2 2.0...

Joomla com_jnewspaper (cid) SQL Injection Vulnerability

No description provided by source. / ! Joomla comjnewspaper cid SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://indonesiancoder.com ! Date : Tue, April 20, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor :...