Trend Micro Threat Intelligence Manager sampleReporting.php 'fakename' Parameter File Disclosure

The version of Trend Micro Threat Intelligence Manager running on the remote Windows host is affected by a file disclosure vulnerability due to a failure to properly sanitize user-supplied input to the 'fakename' parameter in the sampleReporting.php script. A remote, unauthenticated attacker, usi...

Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability (CNVD-2015-04963)

Cisco Unified Intelligence Center is a unified intelligence management center. A cross-site request forgery vulnerability exists in the Cisco Unified Intelligence Center WEB interface, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform...

Unspecified Vulnerability in Oracle Fusion Oracle Business Intelligence Enterprise Edition Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Oracle Business Intelligence Enterprise Edition component that can be exploited by remote attackers to compromise system integrity...

CVE-2015-4274

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified Intelligence Center 10.01 and 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuu94862 and CSCuu97936...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified Intelligence Center 10.01 and 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuu94862 and CSCuu97936...

CVE-2015-4274

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified Intelligence Center 10.01 and 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuu94862 and CSCuu97936...

CVE-2015-4274

Cisco Unified Intelligence Center (UC) web framework versions 10.0(1)–10.6(1) are affected by a Cross-Site Request Forgery (CSRF) vulnerability that can let remote attackers hijack user sessions and perform arbitrary actions within the context of an authenticated user. The root cause is insuffici...

CVE-2015-2598

Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 11.6.39 allows remote authenticated users to affect integrity via unknown vectors related to Mobile - iPad...

Code injection

Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 11.6.39 allows remote authenticated users to affect integrity via unknown vectors related to Mobile - iPad...

CVE-2015-2598

CVE-2015-2598 corresponds to an unspecified vulnerability in the Oracle BI Enterprise Edition mobile app component for Oracle Fusion Middleware (before 11.1.1.7.0 / 11.6.39) that allows remote authenticated users to affect integrity via unknown vectors related to Mobile – iPad. Affected software:...

CVE-2015-2598

Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 11.6.39 allows remote authenticated users to affect integrity via unknown vectors related to Mobile - iPad...

CVE-2015-4274: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified Intelligence Center 10.01 and 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuu94862 and CSCuu97936...

CVE-2015-2598: Undefined Security Weakness

Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 11.6.39 allows remote authenticated users to affect integrity via unknown vectors related to Mobile - iPad...

PT-2015-6493 · Cisco · Cisco Unified Intelligence Center

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center versions 10.01 through 10.61 Description: A cross-site request forgery CSRF issue in the web framework allows remote attackers to hijack the authentication of arbitrary users. Recommendations: For versions...

Hacking Team data discovered the second gold Flash 0day vulnerability-vulnerability warning-the black bar safety net

! Hacking Team is an Italian company specializing in surveillance technology hacking team and the company, was due to the government and intelligence agencies, the sale of spyware and be sued. Karma the final cycle, the company last week was the hack attack, leaked nearly 400GB of data, which in...

Wendy Nather on the Retail Cyber Intelligence Sharing Center

Dennis Fisher talks with Wendy Nather about her new role as the research director at R-CISC, the challenges of getting companies to share threat intelligence, how smaller retails can deal with breaches and threats, and how the government can play a role in information sharing. Download:...

These Laser Beams Will Offer Free Internet to the World from the Sky

During a wide-ranging online question-and-answer session on his Facebook page Tuesday, Facebook co-founder Mark Zuckerberg predicted some wild things for Future. It includes: Telepathy Technology, the ability for humans to talk to each other with their minds. Laser Beams, used to transmit data fr...

Cisco to Buy OpenDNS Company for $635 Million

Cisco, a networking giant that offers traditional network edge protection, has announced that the company is buying cloud-based security company OpenDNS for $635 Million. Yes, OpenDNS, whose Domain Name Services DNS you might have used to avoid regional restrictions or to improve your Internet...

Cisco Acquires OpenDNS for $635 Million

Cisco continues to spend on security, today announcing its intent to acquire San Francisco-based OpenDNS for $635 million. OpenDNS’ domain name system and cloud-based security services bring threat data collected from those platforms to Cisco’s security offerings. “To build on Cisco’s advanced...

Facebook Can Recognize You Even if You Don't Show Your Face

Well, this is incredible and scary both at the same time. Forget about "facial" recognition; Facebook's newest technology is way good at identifying you in photos even without the need to see your face. The New Scientist is reporting about the Facebook's new "experimental" facial recognition...