CVE-2015-4875: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote attackers to affect availability via unknown vectors related to Agent Next Gen...

CVE-2015-4874: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen...

CVE-2015-4859: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Agent Next Gen...

MIRcon 2014 – Day 1 Highlights

The first day of MIRcon 2014 is officially done and was packed with thought-provoking keynotes, presentations and a one-of-a-kind reception. While there's too much to fit into this blog post, I wanted to provide you with some of the highlights: FireEye's COO, Kevin Mandia kicked-off MIRcon and wa...

GNU GNATS 4.0/4.1 Gen-Index Arbitrary Local File Disclosure/Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14169/info GNU GNATS gen-index allows local attackers to disclose and overwrite arbitrary files. A successful attack can result in privilege escalation and a complete compromise of the affected computer as gen-index is...

Next Gen Portfolio Manager Default.ASP Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25195/info Next Gen Portfolio Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Timesheet Next Gen 1.5.2 - Multiple SQLi

No description provided by source. Exploit Title: Timesheet Next Gen 1.5.2 Multiple SQLi Date: 02/23/12 Author: G13 Software Link: https://sourceforge.net/projects/tsheetx/ Version: 1.5.2 Category: webapps php Vulnerability The login.php page has multiple SQL injection vulnerabilities. Both the...

PT-2014-2850

Name of the Vulnerable Software and Affected Versions Winamp versions prior to 5.64 Build 3418 Description The issue is related to a stack-based buffer overflow in the gen jumpex.dll component, which can be triggered by a package with a long Skin directory name. This could lead to a denial of...

PT-2014-4855

Name of the Vulnerable Software and Affected Versions Postfix Admin versions prior to 2.3.7 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is due to a SQL injection vulnerability in the gen show status function in functions.inc.php. Recommendations...

Navy's Cyberwar Expert - New Director of NSA, replacing Gen. Keith Alexander

It is very clear that when we talk about Intelligence and Surveillance, the first name comes to our mind is the U.S National Security Agency NSA and, the second is Gen. Keith Alexander, the Director of NSA..GEEK behind the massive surveillance Programs. Many documents revealed by the former NSA’s...

Bio Basespace SDK 0.1.7 API Key Exposure

The Bio Basespace SDK 0.1.7 Ruby Gem API client code passes the APIKEY to a curl command. This exposes the api key to the shell and process table. Another user on the system could snag the api key by just monitoring the process table. Title: Bio Basespace SDK 0.1.7 Ruby Gem exposes API Key via...

Petition Seeks Removal of Alexander as NSA Director

It has been a rough few months for the National Security Agency, and specifically for its director, Gen. Keith Alexander. The leaks of details of NSA surveillance programs by former contractor Edward Snowden have taken over the news cycle this summer and put the agency’s business out in the open...

PT-2013-3337

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 23.0 SeaMonkey versions prior to 2.20 Description A heap-based buffer underflow issue exists in the cryptojs interpret key gen type function, allowing remote attackers to execute arbitrary code or cause a deni...

Scenes from Black Hat USA 2013

!More from Wednesday’s Legal Access Panel Briefinghttps://media.threatpost.com/wp-content/uploads/sites/103/2013/08/07043123/panel.j...

Gen. Keith Alexander Black Hat Keynote

When Gen. Keith Alexander, the director of the National Security Agency and chief of U.S. Cyber Command, agreed to deliver the opening keynote at Black Hat USA 2013, he had no idea that by the time he took the stage many of the NSA’s most secret information-collection programs would be public...

Hacker raided by FBI after leaking Microsoft next Xbox release information

FBI agents this week raided the home of a Australian hacker who recently leaked a slew of details about Microsoft's next release of Xbox console. "They just took all my computers my hard drives, all of my technology, they took my bank cards, credit cards, bank statements," he said. He had claimed...

Pentagon Plans Massive Increase in Cybersecurity Teams

As the Senate pushes for legislation to improve information-sharing on threats and attacks and President Barack Obama prepares to issue an executive order on cybersecurity, the Department of Defense is looking for a massive increase in the number of trained cybersecurity personnel helping to defe...

CVE-2012-4688 I-GEN opLYNX Central Authentication Bypass

The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser JavaScript support...

CVE-2012-4688

CVE-2012-4688 affects i-GEN opLYNX Central software prior to version 2.01.9. The vulnerability is an authentication bypass in the Central application that can be triggered by the attacker bypassing JavaScript in the browser, enabling remote access to configuration settings and possibly other info...

CVE-2012-4688: DEPRECATED: Authentication Bypass Issues

The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser JavaScript support...