7981 matches found
CVE-2015-1969
CVE-2015-1969 is an XSS vulnerability in IBM Tivoli Common Reporting (TCR) used by Cognos BI. A remote authenticated user could inject script via a crafted URL due to improper validation. Affected products/versions include Tivoli Common Reporting 2.1 (before IF13), 2.1.1 (before IF21), and 3.1.x ...
CVE-2015-1969: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Tivoli Common Reporting TCR 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used in Cognos Business Intelligence before 10.2 IF0015 and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
McAfee Threat Intelligence Exchange Secondary Server Information Disclosure Vulnerability
McAfee Threat Intelligence Exchange TIE the United States McAfee McAfee company's set of unified threat defense system to provide security recovery and infection defense capabilities. The system provides comprehensive threat intelligence awareness, instant understanding of the trails of advanced...
Microsoft repair SharePoint 2 0 1 3 XSS vulnerabilities-the vulnerabilities and early warning-the black bar safety net
SharePoint is the Microsoft Office Suite in a tool for individuals and companies to create a portal page. The vulnerabilityCVE-2 0 1 5-2 5 2 2by FortiNet's FortiGuard Labs security researchers discovered the vulnerability affects SharePoint 2 0 1 3 15.0.4571.1502 early version. SharePoint is a...
CVE-2015-7238
The Secondary server in Threat Intelligence Exchange TIE before 1.2.0 uses weak permissions for unspecified 1 configuration files and 2 installation logs, which allows local users to obtain sensitive information by reading the files...
Information disclosure
The Secondary server in Threat Intelligence Exchange TIE before 1.2.0 uses weak permissions for unspecified 1 configuration files and 2 installation logs, which allows local users to obtain sensitive information by reading the files...
CVE-2015-7238
The CVE-2015-7238 issue concerns McAfee Threat Intelligence Exchange (TIE) Secondary Server prior to 1.2.0, where weak permissions on configuration files and installation logs allow a local user to read files and obtain sensitive information. The vulnerability is a local information-disclosure fl...
CVE-2015-7238: Undefined Security Weakness
The Secondary server in Threat Intelligence Exchange TIE before 1.2.0 uses weak permissions for unspecified 1 configuration files and 2 installation logs, which allows local users to obtain sensitive information by reading the files...
PT-2015-7487
Name of the Vulnerable Software and Affected Versions Threat Intelligence Exchange TIE versions prior to 1.2.0 Description The issue concerns weak permissions set for configuration files and installation logs in the Secondary server of Threat Intelligence Exchange TIE. This weakness allows local...
Techie Police Officer Builds a Sniffing Tool to Track Stolen Devices (based on War-Driving)
Ever wonder, How can you Track your Stolen Smartphone, Laptop or any Smart Device? ...With IMEI Number? ...Or IP address? ...Or may be some special types of equipment? Well, Not required, because now it is possible to track stolen devices just by scanning their MAC addresses. Yes, Just MAC...
The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to influence the integrity of information.
The vulnerability of the Oracle Business Intelligence Enterprise Edition mobile app software platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of information...
SQL Injection Vulnerability in Enterprise Intelligence's Network Office Management Expert System
Network Office Management Expert System is a network office system with a great deal of specialized knowledge. A SQL injection vulnerability exists in the Network Office Management Specialist System, which is owned by Enterprise Intelligence. It allows attackers to exploit the vulnerability to ga...
Intrigue - Intelligence Gathering Framework
Intrigue-core is an API-first intelligence gathering framework for Internet reconnaissance and research. Setting up a development environment The following are presumed available and configured in your environment redis sudo nmap zmap masscan java runtime Sudo is used to allow root access for...
German Spy-Agency Trades Citizens' Metadata in Exchange for NSA's Xkeyscore
This is Really Insane!! Germany's top intelligence agency handed over details related to German citizen metadata just in order to obtain a copy of the National Security Agency's Main XKeyscore software, which was first revealed by Edward Snowden in 2013. According to the new documents obtained by...
British-born ISIS Hacker Killed in US Drone Strike in Syria
Remember Team Poison? The hackers group that was active in 2012, and was known for gaining access to the former Prime Minister Tony Blair's address book and then publishing information from it. The British hacker who actually obtained the Prime Minister's address book and was jailed for six month...
WordPress Business Intelligence Lite Plugin SQL Injection
An SQL injection vulnerability has been reported in WordPress Business Intelligence Lite Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Hook Analyser 3.2 - Malware Analysis Tool
Hook Analyser is a freeware application which allows an investigator/analyst to perform “static & run-time / dynamic” analysis of suspicious applications, also gather analyse & co-related threat intelligence related information or data from various open sources on the Internet. Essentially it’s a...
NSA Says It Will End Access to 215 Records When Authority Ends in November
The National Security Agency says that once its legal authority to conduct Section 215 bulk telephone surveillance ends on Nov. 29, its analysts no longer will be allowed to access the database that holds all of the collected Section 215 records. In May, an appeals court ruled that bulk telephone...
Stakeholders Argue Against Restrictive Wassennaar Proposal
The commenting period regarding the Wassenaar Arrangement expired on Monday but the echo chamber around the largely maligned proposal continues to reverberate. Several stakeholders implicated in the proposal added their voices to that chamber on Friday morning, urging the government to revise...
