CVE-2016-0635

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...

CVE-2016-5446

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Infrastructure...

IoT Insecurity: Top Connected Device Security Concerns

It’s a coin toss whether or not that Internet of Things device you depend on is secure. Those unacceptable 50/50 odds come from a survey by IOActive where technology professionals were asked about the security of connected devices from thermostats, security cameras to alarm systems. Those numbers...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Infrastructure Subcomponent

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.ILOM Integrated Lights Out Manager is one of the system management components that comes pre-installed on x86-based servers and SPARC-based servers. A security vulnerability exists in the Infrastructure...

Leap Second Compatibility

Challenge A leap second is a one-second adjustment that is occasionally applied to Coordinated Universal Time UTC to keep its time of day close to mean solar time. Some software experiences problems when leap seconds are inserted for example, if the leap second is inserted at an unexpected time...

Oracle Solaris Critical Patch Update : jul2016_SRU11_3_10_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Libadimalloc. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows low privilege...

SaltStack Salt Security Bypass Vulnerability (CNVD-2016-05108)

SaltStack Salt aka SaltStack is a set of open source tools for managing infrastructure from SaltStack, Inc. in the United States. The tool provides configuration management, remote execution and other functions , able to manage tens of thousands of servers , with the ability to quickly complete t...

The vulnerability of the Cisco Prime Infrastructure network lifecycle management software allows a hacker to execute arbitrary commands.

The vulnerability of the Web interface of the Cisco Prime Infrastructure network lifecycle management software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially crafted values for certain...

The vulnerability of the Cisco Prime Infrastructure network lifecycle management software allows a hacker to execute arbitrary code or gain access to protected information.

The vulnerability of the software interface of the Cisco Prime Infrastructure network lifecycle management software is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain access to sensitive information through a specially crafted HTTP...

Juniper Crypto Bug Let Attackers Eavesdrop on Router, Switch Traffic

Juniper Networks patched a crypto bug tied to its public key infrastructure that could have allowed hackers to access the company’s routers, switches and security devices and eavesdrop on sensitive communications. The flaw was tied to Juniper products and platforms running Junos, the Juniper...

Radancy: Information disclosure through directory listing at http://dockerhost01.maximum.nl:8080

Hello! Description: Information disclosure through enabled directory listing. Links as poc: http://dockerhost01.maximum.nl:8080 http://dockerhost01.maximum.nl:8080/logs/ See pic 1 2 3 The unauthenticated user can get some juicy info about internal infrastructure, docker containers, logs, tokens a...

T50 - The Fastest Packet Injector

T50 f.k.a. F22 Raptor is a tool designed to perform "Stress Testing". The concept started on 2001, right after release 'nb-isakmp.c', and the main goal was: Having a tool to perform TCP/IP protocol fuzzer, covering common regular protocols, such as: ICMP, TCP and UDP. Things have changed, and the...

Datadog Forces Password Reset Following Breach

Datadog, a software-as-a service-based provider of IT infrastructure monitoring and analytics services, has forced a password reset on all of its user and admin accounts following a breach last Friday. “We have detected unauthorized activity associated with a handful of production infrastructure...

Beckhoff Embedded PC Images and TwinCAT Components Vulnerabilities

OVERVIEW Gregor Bonney from FH Aachen University of Applied Sciences has identified vulnerabilities in Beckhoff’s Embedded PC Images and TwinCAT Components. He published them and reported them to Beckhoff afterward. In 2014, Beckhoff produced a new build and security advisories with instructions ...

CVE-2016-1442

The administrative web interface in Cisco Prime Infrastructure PI before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted field values, aka Bug ID CSCuy96280...

CVE-2016-1442

The administrative web interface in Cisco Prime Infrastructure PI before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted field values, aka Bug ID CSCuy96280...

Code injection

The administrative web interface in Cisco Prime Infrastructure PI before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted field values, aka Bug ID CSCuy96280...

CVE-2016-1442

The administrative web interface in Cisco Prime Infrastructure PI before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted field values, aka Bug ID CSCuy96280...

CVE-2016-1442

CVE-2016-1442 affects Cisco Prime Infrastructure (PI) administrative web interface prior to version 3.1.1. The issue allows remote authenticated users to execute arbitrary commands via crafted field values (Bug CSCuy96280). Severity is high (NVD CVSSv3 base score 8.8; CVSSv2 9.0). Exploitation de...

The vulnerability of the Unified Infrastructure Manager, a monitoring program for IT infrastructure, allows a perpetrator to bypass the authentication process through the LDAP service.

The vulnerability of the Unified Infrastructure Manager’s IT-infrastructure monitoring software exists due to an error in the access management subsystem. Exploiting this vulnerability allows a malicious actor to bypass the authentication process through the LDAP service, by providing only the...