Passive Intelligence Gathering: Just-Metadata

Just-Metadata is a tool that gathers and analyzes metadata about IP addresses. It attempts to find relationships between systems within a large dataset. Just-Metadata is a tool that can be used to gather intelligence information passively about a large number of IP addresses, and attempt to...

US Navy Soliciting Zero Days

The National Security Agency may find and purchase zero days, but that doesn’t mean it’s sharing its hoard with other government agencies such as the U.S. Navy, which apparently is in the market for some unpatched, undisclosed vulnerabilities of its own. A request for proposal posted last...

IBM Cognos Business Intelligence Open Redirect Vulnerability

IBM Cognos is an integrated business intelligence BI and planning solution. A security vulnerability exists in IBM Cognos Business Intelligence. The vulnerability is allowed to be exploited by an attacker to redirect users to kongz-controlled sites via a crafted URL and conduct phishing attacks...

IBM Cognos Business Intelligence Developer 10.2.1 Open Redirect

IBM Cognos Business Intelligence Developer 10.2.1 backURL Open Redirect Vendor: IBM Corporation Product web page: http://www.ibm.com Affected version: 10.2.1 Build 10.2.5000.267 Trial Summary: IBM Cognos Business Intelligence is a web-based, integrated business intelligence suite by IBM. It...

SOPHOS WAF JSON Filter Bypass

SECURITYLABS INTELLIGENT RESEARCH - SECURITY ADVISORY http://www.securitylabs.com.br/ ADVISORY/0115 - SOPHOS WAF WEBSERVER PROTECTION DOES NOT ANALYZE JSON DATA PRIORITY: MEDIUM TYPE: WAF Bypass 1 - About SecurityLabs Intelligent Research ----------------------------------------------- SecurityLa...

IBM Cognos Business Intelligence Developer 10.2.1 (backURL) Open Redirect

Summary IBM Cognos Business Intelligence is a web-based, integrated business intelligence suite by IBM. It provides a toolset for reporting, analysis, scorecarding, and monitoring of events and metrics. The software consists of several components to meet the different information requirements in ...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826...

PT-2015-4855 · Cisco · Cisco Unified Intelligence Center

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center version 10.61 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations: For Cisco Unified Intelligence Center version 10.61...

CVE-2015-0740

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826...

CVE-2015-0740

CVE-2015-0740 is a CSRF vulnerability in Cisco Unified Intelligence Center 10.6(1) (Bug ID CSCus28826). The issue arises from insufficient validation of user input on the web interface, enabling an unauthenticated, remote attacker to hijack the authentication of arbitrary users. Impact is describ...

CVE-2015-0740: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826...

Opoint Media Intelligence 'click.php' Remote URL Redirection Vulnerability

Opoint Media Intelligence is a Web-based OPAC Online Public Access Catalog interface platform from Opoint Norway. A remote URL redirection vulnerability exists in Opoint Media Intelligence. An attacker can exploit this vulnerability by constructing a URI that contains a redirection to a malicious...

Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability

Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides a comprehensive display of report-related business data and call center data and other functions. A cross-site request forgery vulnerability exists in Cisco...

President Urged to Reject Mandatory Backdoors

One-off opposition to calls on Congress from FBI Director James Comey and NSA Director Adm. Mike Rogers to draft a legal framework that would enable law enforcement to access encrypted communication has been scattered at best. Experts have taken to their own forums to voice opposition to the...

UK Government Rewrites Laws to Let GCHQ Hack Into Computers Legally

The UK Government has quietly changed the Anti-Hacking Laws quietly that exempt GCHQ, police, and other electronic intelligence agencies from criminal prosecution for hacking into computers and mobile phones and carrying out its controversial surveillance practices. The details of the changes wer...

US House Votes to End NSA Phone Records Collection

The U.S. House of Representatives’ resounding vote on Wednesday to end the National Security Agency’s collection of phone metadata and business records shifts the Senate focus squarely onto the shoulders of Kentucky Republican Senator, Mitch McConnell. McConnell is a staunch defender of the...

WordPress Artificial Intelligence Theme <= 1.2.3 - Cross Site Scripting

This WordPress theme is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the theme...

Artificial Intelligence Theme <= 1.2.3 - DOM Cross-Site Scripting (XSS)

The artificial-intelligence WordPress theme was affected by a DOM Cross-Site Scripting XSS security vulnerability...

Court's Ruling a 'Clear Signal' About Mass Surveillance Programs, Experts Say

The ruling last week by the Second Circuit Court of Appeals that the NSA’s years-long bulk collection of phone metadata is illegal is a “clear signal” that courts are moving in the direction of striking down some mass surveillance programs, experts say. The decision, issued Thursday, is among the...

Oracle Business Intelligence Mobile HD for iOS mimeAttachmentHeaderName Cross-Site Scripting Vulnerability

Oracle Business Intelligence Suite Enterprise Plus is a comprehensive suite of enterprise BI products that provide a full range of BI capabilities, including interactive dashboards, fully on-the-fly proactive intelligence and alerting solutions.Oracle Business Intelligence Mobile HD for iOS is...