CVE-2012-4835

IBM Cognos BI is affected by CVE-2012-4835: a reflected cross-site scripting vulnerability in IBM Cognos BI versions 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 that allows remote attackers to inject arbitrary script via unspecified vectors. The vulnerability is disc...

Old School Hackers spying on European governments

Kaspersky Lab's team of experts recently published a new research report that analyzed that Cyber criminals have targeted government officials in more than 20 countries, including Ireland and Romania with a new piece of malware called 'MiniDuke'. In a recent attack, malware has infected governmen...

CVE-2012-2193: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Query Studio in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4840: Improper Control of Generation of Code

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to conduct XPath injection attacks, and call XPath extension functions, via unspecified vectors...

CVE-2012-4835: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4836: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is not properly handled during rendering of...

CVE-2012-4837: Exposure of Sensitive Information to an Unauthorized Actor

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

CVE-2012-4858: Improper Input Validation

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2012-2177: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors related to the search feature...

Latest Kelihos Botnet Shut Down Live at RSA Conference 2013

SAN FRANCISCO – Down goes Kelihos—again. The third version of the prolific peer-to-peer botnet responsible for volumes of pharmaceutical spam, Bitcoin wallet theft and credential harvesting was shut down before a live audience today at RSA Conference 2013. With the execution of a few commands tha...

Anup Ghosh on Cyberespionage, Attribution and APTs

Dennis Fisher talks with Anup Ghosh of Invincea about the recent wave of companies admitting to being hacked by APT groups, the difference between cyberespionage and cyberwar, what the government can do to encourage more intelligence sharing and whether compromised companies are spending enough...

Comment Crew Exposé a New Level of China Attack Attribution

China has been blamed for cyberattacks on every major industrial base in the United States—and even in some corners for the Super Bowl blackout. But most of it has been rampant speculation coupled with the lacing together of a number of loose ends. Examples of the kind of direct attribution to th...

Anonymous threatens to Hack Obama's State of the Union broadcast

The hacktivist group Anonymous says it’s planning to block all live streams of President Obama’s State of the Union address Tuesday night, in an operation entitled "Operation SOTU". “We reject the State of the Union. We reject the authority of the President to sign arbitrary orders and bring...

CISPA Returns back, Forget privacy reforms

The Cyber Intelligence Sharing and Protection act CISPA will be reintroduced by House Intelligence Committee Chairman Mike Rogers R-Mich. and ranking member Rep. Dutch Ruppersberger D-Md. before the US House next week. CISPA would've allowed any company to give away all the data its collected on...

CISPA Returns back, Forget privacy reforms

The Cyber Intelligence Sharing and Protection act CISPA will be reintroduced by House Intelligence Committee Chairman Mike Rogers R-Mich. and ranking member Rep. Dutch Ruppersberger D-Md. before the US House next week. CISPA would've allowed any company to give away all the data its collected on...

Microsoft Report Examines Socio-Economic Relationships to Malware Infections

Tired of all those malware and vulnerability reports that count how many of each have been reported to security companies? Well, Microsoft has taken a different tack in its latest Security Intelligence Report SIR by globally comparing regions’ relative security against socio-economic factors...

Lockheed Martin's Steve Adegbite on Cyber Intelligence Driven Defense

Steve Adegbite of Lockheed Martin discussed the need for a more intelligent method of network defense and how monitoring attackers and learning from their methods can be a valuable exercise...

Operation Red October : Cyber Espionage campaign against many Governments

A new sensational discovered has been announced by Kaspersky Lab's Global Research & Analysis Team result of an investigation after several attacks hit computer networks of various international diplomatic service agencies. A new large scale cyber-espionage operation has been discovered, named Re...

Indian Government Wiretapping and started BlackBerry interception

According to a report, All major Indian telecom companies, including Bharti Airtel, Vodafone India and Tata Tele services, have agreed to share real-time interception of BlackBerry calls and data services on their networks with Security agencies to meet the December 31 deadline fixed by the India...

Indian Government Wiretapping and started BlackBerry interception

According to a report, All major Indian telecom companies, including Bharti Airtel, Vodafone India and Tata Tele services, have agreed to share real-time interception of BlackBerry calls and data services on their networks with Security agencies to meet the December 31 deadline fixed by the India...