CiscoWorks Common Services 3.1.1 - Auditing Directory Traversal

source: https://www.securityfocus.com/bid/47905/info CiscoWorks Common Services is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. A remote attacker could exploit this vulnerability using directory-traversal strings such as '../' to gain...

Adobe Flash Player ActionScript Virtual Machine CVE-2011-0618 Remote Integer Overflow Vulnerability

Description Adobe Flash Player is prone to a remote integer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies...

Adobe Flash Player CVE-2011-0619 Remote Memory Corruption Vulnerability

Description Adobe Flash Player is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies...

Reports: PSN to Remain Down all Month, Sony Considers Offering Bounty

Sony’s PlayStation Network remains down after suffering an external intrusion that knocked the online gaming platform offline on April 20, and new reports suggest the popular gaming network may remain so until the end of the month. Despite a promise on April 31 to have its PSN network back online...

HP SiteScope Detection

The remote host is running HP SiteScope, an agentless network monitoring application. HP SiteScope was formerly known as Mercury SiteScope. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53621; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate"...

Sony: Hackers Nabbed Info Of 70 Million Members

Sony admitted that hackers broke into its PlayStation Network online gaming network made off with the personal information of more than 77 million members in what would be one of the largest reported data breaches in history. A message posted on the PlayStation Network Web site informed customers...

McAfee study - India is fourth lowest in security adoption !

McAfee study - India is fourth lowest in security adoption ! McAfee and the Center for Strategic and International Studies CSIS revealed the findings from a global report 'In the Dark, Crucial Industries Confront Cyber attacks' that reflects the cost and impact of cyber attacks on critical...

CVE-2011-0795

Unspecified vulnerability in the Single Sign On component in Oracle Fusion Middleware 10.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Administration and Monitoring...

Design/Logic Flaw

Unspecified vulnerability in the Single Sign On component in Oracle Fusion Middleware 10.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Administration and Monitoring...

CVE-2011-0795

CVE-2011-0795 affects Oracle Fusion Middleware 10.1.2.3 Single Sign-On component. The vulnerability is described as unspecified with remote authenticated access that can affect integrity via unknown vectors related to Administration and Monitoring. The advisory context in connected sources refere...

CVE-2011-0795

Unspecified vulnerability in the Single Sign On component in Oracle Fusion Middleware 10.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Administration and Monitoring...

IBM Tivoli Monitoring Java Unspecified Vulnerability

According to the version found in the .properties files, the remote host has a version of IBM Tivoli Monitoring that contains a Category I security finding in the packaged version of Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53490; scriptversion"1.7";...

Insider Allegedly Leaked Data Belonging to 3,000 US Airways Pilots

An insider data breach at the US Airline Pilots Association USAPA has exposed the sensitive financial data of some 3,000 US Airways pilots, according to reports. The USAPA, a union representing more than 5,000 US Airways pilots, claims that the airline recently became aware of an incident in whic...

The Hartford, Hacked

Hackers reportedly broke into and installed password-stealing programs on a number of servers belonging to insurance giant The Hartford, according to a ComputerWorld report. The 200-year-old, 28,000 employee strong company sent a letter of warning to some 300 employees, contractors and a small...

Anfibia Reactor 2.1.1 Cross Site Scripting

!-- Anfibia Reactor 2.1.1 login.do Remote XSS POST Injection Vulnerability Vendor: Anfibia Software Product web page: http://www.anfibia-soft.com Affected version: 2.1.1.12 Summary: Fast web-based server monitoring. Keep an eye on servers, connections, databases, cpu, hard drives and more! Desc:...

Lessons Learned From the LizaMoon SQL Injection Attack

Last week, a large scale SQL Injection attack dubbed LizaMoon, referencing one of the domain names used in the attack, surfaced. This attack targets websites by injecting code that redirects visitors to a rogue anti-virus AV site. While on the AV site, visitors are presented with fake antivirus...

Xymon monitor cross-site scripting vulnerabilities

Several cross-site scripting vulnerabilities have been identified in the Xymon systems- and network-monitoring tool available at http://sourceforge.net/projects/xymon/ All versions prior to 4.3.1 released April 3, 2011 are vulnerable. I would like to thank David Ferrest for notifying me of this...

EMC Buys Security Firm NetWitness

UPDATE: Call it ‘dancing with the girl that brought ‘ya,’: two weeks after it disclosed a serious security breach at its RSA Security Division, tech firm EMC said it was buying NetWitness, a threat analysis firm that helped it detect the breach in the first place. EMC said on Monday that it had...

RedHat Update for wireshark RHSA-2011:0370-01

Check for the Version of wireshark OpenVAS Vulnerability Test RedHat Update for wireshark RHSA-2011:0370-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for whatsup FEDORA-2011-2801

Check for the Version of whatsup OpenVAS Vulnerability Test Fedora Update for whatsup FEDORA-2011-2801 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...