HPE Discovery and Dependency Mapping Inventory Arbitrary Command Execution Vulnerability

HPE Discovery and Dependency Mapping Inventory DDMi is a Hewlett Packard Enterprise HPE solution for automating the discovery and logging of client device information to help IT departments manage and control costs and risks. Apache Commons Collections ACC is a U.S. Apache Apache Software...

CVE-2016-4369

HPE Discovery and Dependency Mapping Inventory DDMi 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

[SECURITY] Fedora 22 Update: glpi-0.90.3-1.fc22

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

CVE-2016-2202

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

CVE-2016-2202

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

Design/Logic Flaw

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

CVE-2016-2202

The CVE-2016-2202 issue affects Symantec ITMS (Inventory Solution component in the Management Agent on the client). The vulnerability allows a local user to bypass the inventory’s application-denial/blacklist functionality, effectively bypassing policy to run unauthorized applications. The root c...

CVE-2016-2202

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

[SECURITY] Fedora 24 Update: glpi-0.90.3-1.fc24

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

OCS Inventory NG SQL Injection Vulnerability

OCS Inventory NG Open Computer and Software Inventory Next Generation is a system management software that helps administrators keep track of computer software installations and configurations, and enables low network traffic communication between HTTP proxies and servers. OCS Inventory NG suffer...

Symantec ITMS Inventory Solution Application Denial Functionality Bypass

SUMMARY The Inventory Solution component of Symantecs IT Management Agent, the client portion of Symantec IT Management Suite ITMS powered by Altiris, can be configured to deny one or more applications from running on a windows managed client as part of IT management functions. A determined user...

Movie Collection & Inventory - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Movie Collection & Inventory published at the 'play' market has multiple vulnerabilities...

My Inventory (free) - Dangerous filesystem permissions, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application My Inventory free published at the 'play' market has multiple vulnerabilities...

curtistrailers.com XSS vulnerability

Open Bug Bounty ID: OBB-141282 Description| Value ---|--- Affected Website:| curtistrailers.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OCS Inventory NG 2.2 - SQL Injection

OCS Inventory NG 2.2 - SQL Injection Exploit Title: OCS Inventory NG /ocsreports/index.php?function=visusearch - Time-based SQL Injection Choose a parameter, use EXACTLY operator: ' union select sleep5; - Code execution Bypass input escape and write to filesystem webshell PoC: ' union select...

OCS Inventory NG 2.2 - SQL Injection

Exploit Title: OCS Inventory NG /ocsreports/index.php?function=visusearch - Time-based SQL Injection Choose a parameter, use EXACTLY operator: ' union select sleep5; - Code execution Bypass input escape and write to filesystem webshell PoC: ' union select CONCATchar60,char63,'php echo...

Design/Logic Flaw

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 7.1 before 7.1.4 and Tivoli Storage FlashCopy Manager for VMware aka Spectrum Protect Snapshot 4.1 before 4.1.4 allows...

Top 10 — 2016 New Year's Resolutions for Cyber Security Professionals

Billions of dollars are spent in securing business operations, and yet attackers still find ways to breach a network. With the ever increasing growth in security attacks across all threat vectors, you should consider these New Year’s resolutions to help solve your security challenges in 2016: 1...

Use DHCP Discovery to Implement Critical Security Control #1

The number one critical security control from the Center for Internet Security recommends actively managing all hardware devices on the network: CSC 1: Inventory of Authorized and Unauthorized Devices Actively manage inventory, track, and correct all hardware devices on the network so that only...

Apple iOS/OS X/watchOS Heap Buffer Overflow Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. Apple iOS versions prior to 9.1, Apple OS X versions prior to 10.11.1, and watchOS versions prior to 2.0.1, DNS client...