1451 matches found
WSSAT - Web Service Security Assessment Tool
WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it performs both static and dynamic tests again...
Network-based DNS logging in Go: GoPassiveDNS
A network-capture based DNS logger, inspired by passivedns. It uses gopacket to deal with libpcap and packet processing. It outputs JSON logs. It is intended to deal with high volume query capture in environments with anywhewre from one to hundreds of DNS resolvers. Why not use PassiveDNS from...
Rack-Bug - Debugging Toolbar For Rack Applications Implemented As Middleware
Rack::Bug adds a diagnostics toolbar to Rack apps. When enabled, it injects a floating div allowing exploration of logging, database queries, template rendering times, etc. Features Password-based security IP-based security Rack::Bug instrumentation/reporting is broken up into panels. Panels in...
HP ArcSight Logger < 6.1P1 Multiple Vulnerabilities
The version of HP ArcSight Logger installed on the remote host is prior to 6.1P1. It is, therefore, affected by multiple vulnerabilities in the Intellicus and client-certificate upload components due to improper validation of user-supplied input. A remote attacker can exploit these to bypass...
CVE-2015-6864
HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
Design/Logic Flaw
HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
Design/Logic Flaw
HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
CVE-2015-6863
HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
CVE-2015-6863
HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
CVE-2015-6864
HP ArcSight Logger prior to version 6.1P1 is affected by multiple vulnerabilities in the Intellicus and client-certificate upload components, due to improper input validation, enabling remote authenticated execution of arbitrary code. Remediation per the connected Nessus entry is upgrade to 6.1P1...
CVE-2015-6863
HP ArcSight Logger before 6.1P1 is affected by multiple vulnerabilities in the Intellicus and client-certificate upload components due to improper validation of user-supplied input. This allows a remote attacker to execute arbitrary code. The issues are reported in the context of HP ArcSight Logg...
CVE-2015-6864
HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
HP HPE ArcSight Logger Certificate Upload Security Bypass Vulnerability
HP HPE ArcSight Logger is a suite of log management software. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A vulnerability in the HP HPE ArcSight Logger client certificate upload processing...
HP HPE ArcSight Logger Certificate Upload Security Bypass Vulnerability (CNVD-2016-00362)
HP HPE ArcSight Logger is a suite of log management software. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A vulnerability in the HP HPE ArcSight Logger client certificate upload processing...
Multiple Cross-Site Scripting Vulnerabilities in HP ArcSight Management Center
HP ArcSight Management Center is a security management center from Hewlett-Packard HP in the U.S. HP ArcSight Logger is a log management software tool. Multiple cross-site scripting vulnerabilities exist in HP ArcSight Management Center versions prior to 2.1, and ArcSight Logger versions prior to...
CVE-2015-5441
Multiple cross-site scripting XSS vulnerabilities in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-5441
CVE-2015-5441 concerns stored XSS in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 (CWE-79). Multiple connected sources (e.g., JVN entries and CNVD/NVD mirrors) describe that an arbitrary script may be executed in a user’s browser due to unsafe handling of input. Affecte...
CVE-2015-5441
Multiple cross-site scripting XSS vulnerabilities in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-6030
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access...