CVE-2011-3423

CVE-2011-3423 affects TIBCO Managed File Transfer Internet Server (before 7.1.1), Managed File Transfer Command Center (before 7.1.1), and TIBCO Slingshot (before 1.8.1). The root cause is defects in the processing of inbound HTTP requests, enabling cross-site scripting (XSS) to view/modify infor...

CVE-2011-3424

CVE-2011-3424 affects TIBCO Managed File Transfer Internet Server (7.0.x–7.1.0) and Command Center (7.0.x–7.1.0), and TIBCO Slingshot (1.8.0 and earlier). Root cause: defects in processing inbound HTTP requests leading to a session fixation vulnerability that can allow an attacker to hijack a web...

CVE-2011-3423

Cross-site scripting XSS vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or...

TIBCO Security Advisory: September 13, 2011 - TIBCO® Managed FileTransfer

TIBCO® Managed File Transfer vulnerability Original release date: Sep 13, 2011 Last revised:-- CVE-2011-3423, CVE-2011-3424 Source: TIBCO SoftwareInc. TIBCO Managed File Transfer vulnerability Original release date: Sep 13, 2011 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO...

Mini FTP Server 1.1 - Buffer Corruption Remote Denial of Service

!/usr/bin/python Mini FTP Server 1.1 Buffer Corruption Remote Denial Of Service Exploit Vendor: webmaster442 Product web page: http://miniftpserver.codeplex.com Affected version: 1.1.1.0 Summary: Minimal FTP server for windows. Uses only managed code. Works with Total commander. Desc: MiniFTPServ...

CVE-2011-0279

HP Multifunction Peripheral MFP Digital Sending Software DSS 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication...

Authentication flaw

HP Multifunction Peripheral MFP Digital Sending Software DSS 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication...

CVE-2011-0279

HP Multifunction Peripheral MFP Digital Sending Software DSS 4.91.00 does not properly configure authentication settings of managed devices within device templates, which allows attackers to access these devices via actions that were intended to require authentication...

TeaMp0isoN Shell - Private Build [BETA] - v0.1 Download !

TeaMp0isoN Shell - Private Build BETA - v0.1 Download ! Features - Mass Defacement Tool - Safe Mode Bypass - OpenBasedir Bypass - Fixed SQL managed - FTP Brute Force Tool - Fully Undetected Downlaod : Link Removed- Reason: Backdoor News Source : TeaMp0isoN...

CVE-2010-4103

Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown vectors...

[security bulletin] HPSBMA02605 SSRT100238 rev.1 - HP Insight Managed System Setup Wizard for Windows, Remote Arbitrary File Download

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02573176 Version: 1 HPSBMA02605 SSRT100238 rev.1 - HP Insight Managed System Setup Wizard for Windows, Remote Arbitrary File Download NOTICE: The information in this Security Bulletin should be...

CVE-2010-4103

HP Insight Managed System Setup Wizard for Windows prior to version 6.2 is affected by a vulnerability that could allow a remote attacker to download arbitrary files. The issue is documented as CVE-2010-4103 and is cited by HP’s security bulletin HPSBMA02605 (SSRT100238 rev.1), which lists HP Ins...

CVE-2010-4103

Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown vectors...

Frequent VoIP Attacks Result in Honeypot

A security expert at a managed services provider has kicked off a project to expose and blacklist the networks hosting VoIP attacks against his and other companies’ VoIP PBX servers. Read the full article. Dark Reading...

Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008

The remote host is missing Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008. One or more of the following components are affected: ATS BOM CoreGraphics CoreServices CoreTypes Flash Player Plug-in Kernel Libsystem Managed Client networkcmds Podcast Producer UDF OpenVAS Vulnerability Test...

Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008

The remote host is missing Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

ID Theft Gang Using Amazon's EC2 as Command and Control Server

Security researchers have intercepted a new variant of the Zeus crimeware using Amazon’s EC2 services to command and control the botnet. The cybercriminals appear to be using Amazon’s RDS managed database hosting service as a backend alternative in case they lose access to the original domain,...

[IVIZ-09-005] CA HIPS Remote Kernel Vulnerability

--------------------------------------------------------------------------------------------------- iViZ Security Advisory 09-005 19/08/2009 --------------------------------------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd...

Gartner Sees Better Days Ahead For Security Budgets

From SearchSecurity.com Robert Westervelt The dismal economy has put the brakes on a lot of security projects, but the need to maintain the basics and automate some security functions has fueled interest in managed security services and some specific security areas, according to analysts at Gartn...

Economy, SMB security to dominate at RSA Conference

As a security show, the RSA Conference leaves a lot to be desired. Its technical sessions carry an uncomfortable load of marketing baggage and don’t have either the cachet or entertaining edge of those at Black Hat or CanSecWest. Anyone will tell you that the real business of RSA is happening off...