Five-Year 'Dust Storm' APT Campaign Seen Targeting Japanese Critical Infrastructure

A five-year campaign primarily focused on extracting sensitive information from Japanese oil, gas, and electric utilities was outlined by researchers on Tuesday. Referred to as Operation Dust Storm .PDF by researchers at Cylance, the campaign has managed to stay persistent over the years, and...

Cisco Application Policy Infrastructure Controller Enterprise Module Cross-Site Scripting Vulnerability

Cisco Application Policy Infrastructure Controller Enterprise is an application policy infrastructure control module. A cross-site scripting vulnerability exists in Cisco Application Policy Infrastructure Controller Enterprise, which allows remote attackers to exploit the vulnerability to inject...

Recapping SAS 2016: IoT Hacks, Metel, Poseidon, and More

Mike Mimoso and Chris Brook recap last week’s Security Analyst Summit — including lots of IoT and critical infrastructure talk, how a researcher hacked his hospital, news on APTs like Metel and Poseidon, and more. Download: ReflectingonSAS2016.mp3 Music by Chris Gonsalves...

Cisco Application Policy Infrastructure Controller Enterprise Module Detection (HTTP)

HTTP based detection of Cisco Application Policy Infrastructure Controller Enterprise Module. Note: When HTTP credentials are given, the script is able to extract version and patch information from the application. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpte...

Cisco Application Policy Infrastructure Controller Cross Site Scripting Vulnerability (cisco-sa-20160208-apic)

Cisco Application Policy Infrastructure Controller is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Cisco Application Policy Infrastructure Controller Detection (HTTP)

HTTP based detection of Cisco Application Policy Infrastructure Controller. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2016-1318

Cross-site scripting XSS vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489...

Cisco Application Policy Infrastructure Controller Cross-Site Scripting Vulnerability

The Cisco Application Policy Infrastructure Controller APIC is the U.S. A controller that automates the management of application-centric infrastructure ACI. A cross-site scripting vulnerability exists in the Cisco Application Policy Infrastructure Controller, which can be exploited by remote...

DEBIAN-CVE-2015-7546

The identity service in OpenStack Identity Keystone before 2015.1.3 Kilo and 8.0.x before 8.0.2 Liberty and keystonemiddleware formerly python-keystoneclient before 1.5.4 Kilo and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI or PKIZ token providers,...

UBUNTU-CVE-2015-7546

The identity service in OpenStack Identity Keystone before 2015.1.3 Kilo and 8.0.x before 8.0.2 Liberty and keystonemiddleware formerly python-keystoneclient before 1.5.4 Kilo and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI or PKIZ token providers,...

PYSEC-2016-20

The identity service in OpenStack Identity Keystone before 2015.1.3 Kilo and 8.0.x before 8.0.2 Liberty and keystonemiddleware formerly python-keystoneclient before 1.5.4 Kilo and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI or PKIZ token providers,...

Cisco Application Policy Infrastructure Controller Access Control Vulnerability

A vulnerability in the role-based access control RBAC of the Cisco Application Policy Infrastructure Controller APIC could allow an authenticated remote user to make configuration changes outside of their configured access privileges. The vulnerability is due to eligibility logic in the RBAC...

Government Agencies Audit For Juniper Backdoor

Most U.S. government agencies have until Feb. 4 to audit their IT infrastructure for the use of backdoored Juniper Networks’ Netscreen firewalls. Letters went out late last week from the House Oversight & Government Reform Committee to the leaders of the various agencies asking them to provide th...

Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC Component Denial of Service Vulnerability (CNVD-2016-00688)

Oracle JD Edwards EnterpriseOne is a fully integrated enterprise resource planning software suite that combines business value, standards-based technology and deep industry experience into a low TCO business solution. An unspecified security vulnerability in the Oracle JD Edwards EnterpriseOne...

Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC Component Denial of Service Vulnerability (CNVD-2016-00686)

Oracle JD Edwards EnterpriseOne is a fully integrated enterprise resource planning software suite that combines business value, standards-based technology and deep industry experience into a low TCO business solution. An unspecified security vulnerability exists in the Oracle JD Edwards...

Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC Component Denial of Service Vulnerability (CNVD-2016-00687)

Oracle JD Edwards EnterpriseOne is a fully integrated enterprise resource planning software suite that combines business value, standards-based technology and deep industry experience into a low TCO business solution. An unspecified security vulnerability in the Oracle JD Edwards EnterpriseOne...

CVE-2016-0424

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0422...

CVE-2016-0424

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0422...

CVE-2016-0423

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Enterprise Infrastructure SEC...

CVE-2016-0422

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0424...