Microsoft paid over $28,000 Rewards to Six Researchers for its first ever Bug Bounty Program

Microsoft today announced that they had paid more than $28,000 in rewards to Security Researchers for its first Bug Bounty program, that went on for a month during the preview release of Internet Explorer 11 IE11. The program was designed to run during Internet Explorer 11's browser beta test on...

Authentication flaw

The PPP Access Concentrator PPPAC in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 through 2.15, and SEIL/neu 2FE Plus 1.80 through 2.15 generates predictable random numbers, which allows...

CVE-2013-4708

The CVE-2013-4708 issue affects SEIL Series routers from Internet Initiative Japan Inc. The vuln arises from predictable random-number generation in the PPP Access Concentrator (PPPAC) when performing RADIUS authentication, allowing remote attackers who can sniff RADIUS traffic to bypass authenti...

Juniper NetScreen VPN Client Detection

The remote host has the Juniper NetScreen VPN Client installed. C Tenable Network Security. Inc. include"compat.inc"; if description scriptid70120; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT", value:"0001-T-0914";...

IBM WebSphere Service Registry and Repository Installed

IBM WebSphere Service Registry and Repository, a software life cycle management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70069; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate",...

Vulnerabilities in Avaya IP Office Customer Call Reporter

Hello 3APA3A! I want to warn you about vulnerabilities in Avaya IP Office Customer Call Reporter. These are Remote HTML Include and Remote XSS Include Cross-Site Scripting vulnerabilities. After I found multiple vulnerabilities in Avaya IP Office Customer Call Reporter in December, I informed ZDI...

SuSE 11.3 Security Update : apache2-mod_security2 (SAT Patch Number 8149)

This update of modsecurity2 fixed a NULL pointer dereference crash CVE-2013-2765 and a memory issue double free. bnc822664 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

Cisco Network Admission Control (NAC) Version

The remote host is a Cisco Network Admission Control NAC Manager. It is possible to read the NAC version by connecting to the switch using SSH. TRUSTED...

Amazon Linux AMI : kernel (ALAS-2012-83)

It was found that the datalen parameter of the sockallocsendpskb function in the Linux kernel's networking implementation was not validated before use. A local user with access to a TUN/TAP virtual interface could use this flaw to crash the system or, potentially, escalate their privileges. Note...

FuzeZip 1.0 SEH Buffer Overflow Vulnerability

FuzeZip version 1.0.0.131625 suffers from a SEH based overflow and stack based overflow which is protected by stack cookies. Title: SEH BUFFER OVERFLOW IN FUZEZIP V.1.0 Severity: High History: 16.Apr.2013 Vulnerability reported Authors: Josep Pi Rodriguez, Pedro Guillen Nuñez , Miguel Angel de...

Triangle Research Nano-10 PLC Improper Input Validation

OVERVIEW Researcher Wei Gao of IXIA has identified an improper input validation vulnerability in Triangle Research International, Inc.’s TRi Inc. Nano‑10 programmable logic controller PLC.IXIA Web site...

myBusinessAdmin SQL Injection

Exploit Title : myBusinessAdmin imagepopup.php SQL Injection Vulnerability Author : DevilScreaM Date : 22/08/2013 Category : Web Applications Vendor : http://mybusinessadmin.com/ Product Link : http://www.redcow.ca/products/mybusinessadmin/ Dork intext:Powered by myBusinessAdmin & Red Cow...

Avaya IP Office Customer Call Reporter 8.0.9.13 XSS

Hello list! I want to warn you about vulnerabilities in Avaya IP Office Customer Call Reporter. These are Remote HTML Include and Remote XSS Include Cross-Site Scripting vulnerabilities. After I found multiple vulnerabilities in Avaya IP Office Customer Call Reporter in December, I informed ZDI...

CiscoWorks Common Services Installed

CiscoWorks Common Services, the foundation of application infrastructure for CiscoWorks network management solutions, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69468; scriptversion"1.9";...

RSA Authentication Agent Installed

RSA Authentication Agent, an authentication application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69427; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"RS...

CVE-2013-4879

Vulnerability: CVE-2013-4879 affects BigTree CMS 4.0 RC2 and earlier, due to an SQL injection in the code path that processes input via PATH_INFO to index.php (affecting core/inc/bigtree/cms.php). The root cause is insufficient sanitization/validation of user-supplied data, enabling remote attack...

CakePHP 2.3.7 / 2.2.8 Local File Inclusion

CVE Number: N/A not assigned Title: CakePHP AssetDispatcher Local File Inclusion Vulnerability Affected Software: Confirmed on CakePHP v2.3.7, v2.2.8 prior versions may also be affected Credit: Takeshi Terada of Mitsui Bussan Secure Directions, Inc. Issue Status: v2.3.8 & 2.2.9 was released which...

Cisco WebEx One-Click Detection

The remote host has Cisco WebEx One-Click installed. WebEx One-Click is a desktop client for WebEx's meeting software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69274; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

Symantec Backup Exec Remote Agent for Linux and UNIX Servers (RALUS) Installed

Symantec Backup Exec Remote Agent for Linux and UNIX Servers RALUS, a backup agent for Linux and UNIX servers, is installed on the remote host. TRUSTED...

SA-CONTRIB-2013-066 - Monster Menus - Multiple Vulnerabilities

Monster Menus enables you to create granular page permissions, and apply them to a hierarchical page structure. The mmwebform submodule enables you to assign permissions derived from Monster Menus to webform forms. The module doesn't sufficiently filter titles entered into page settings and echoe...