10413 matches found
DSA-3312-1 cacti - security update
Bulletin has no description...
[SECURITY] [DLA 278-1] cacti security update
Package : cacti Version : 0.8.7g-1+squeeze7 CVE ID : CVE-2015-4634 Debian Bug : NA Several SQL injection vulnerabilities were discovered in cacti, a frontend to rrdtool for monitoring systems and service: CVE-2015-4634 SQL injection vulnerability in Cacti before 0.8.8e allows remote attackers to...
OpenDNS BGP Stream Twitter Feed
Enterprises in the throes of a denial-of-service attack, or suspicious about the integrity of their Internet traffic, will soon have a free data feed available that cuts through the noise produced by normal Internet routing over BGP, the Border Gateway Protocol. During next month’s Black Hat...
[SECURITY] Fedora 21 Update: condor-8.3.6-1.fc21
HTCondor is a workload management system for high-throughput and high-performance jobs. Like other full-featured batch systems, HTCondor provides a job queueing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs ...
The Truman show: the Hacking Team Win32 monitor code analysis-vulnerability warning-the black bar safety net
Hacking Team,an Italian software company. Their company is mainly to governments and legal bodies selling intrusion and surveillance software. 7 on the 5th night by the hacker attack, 400G of information were to leak, 0Day, various exploits also together is known around the world know, which is t...
New Bill Would Grant Lifetime Credit Monitoring to OPM Victims
A group of lawmakers are proposing victims of last month’s expansive Office of Personnel Management hack receive lifetime fraud protection and credit monitoring. Democratic lawmakers on Monday presented the Reducing the Effects of the Cyberattack on OPM Victims Emergency Response, or RECOVER Act...
Microsoft Internet Explorer CVE-2015-2403 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
Microsoft Internet Explorer CVE-2015-2414 Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 8, 9, 10, and 11 are vulnerable. Technologies Affected Avaya CallPilot 4.0 Avaya...
Hacking Team Promises to Rebuild RCS
The aftermath of the Hacking Team attack raised legitimate questions about the controversial Italian surveillance software vendor’s long-term viability. With reams of sensitive internal data and intellectual property posted online, how could the company survive? For now, however, the company seem...
Debian DLA-255-1 : cacti security update
Several vulnerabilities cross-site scripting and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. We recommend that you upgrade your cacti packages. CVE-2015-2665 Cross-site scripting XSS vulnerability in Cacti before 0.8.8d allows remote attackers ...
[SECURITY] [DLA 255-1] cacti security update
Package : cacti Version : 0.8.7g-1+squeeze6 CVE ID : CVE-2015-2665 CVE-2015-4342 CVE-2015-4454 Several vulnerabilities cross-site scripting and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. We recommend that you upgrade your cacti packages...
DLA-255-1 cacti - security update
Bulletin has no description...
Pandora FMS Authentication Bypass Vulnerability
Pandora FMS Flexible Monitoring System is a monitoring system from the Pandora FMS team. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An authentication bypass vulnerability exists in Pandora FMS. An attacker can exploit this vulnerability to...
Debian DSA-3295-1 : cacti - security update
Several vulnerabilities cross-site scripting and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...
Debian Security Advisory DSA 3295-1 (cacti - security update)
Several vulnerabilities cross-site scripting and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. OpenVAS Vulnerability Test $Id: deb3295.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3295-1 using nvtgen 1.0 Script...
Update Rollup for Microsoft Monitoring Agent
Describes the issues that are fixed in update rollup KB 3071396 for Microsoft Monitoring Agent.This article describes the issues that are fixed in an update rollup for the Microsoft Monitoring Agent. Additionally, this article contains installation instructions for the update rollup.Issues that a...
Facebook Helps Combat Apple XARA Vulnerabilities With Osquery
Apple may still be in the process of patching XARA, the series of weaknesses that surfaced in its authentication infrastructure last week, but Facebook has stepped up and made it easier for organizations to detect whether their system is being exploited by the vulnerabilities. Engineers with the...
Sinapsi eSolar Light Plaintext Password Disclosure Vulnerability
Sinapsi eSolar Light is a monitoring system for use within solar applications from the Italian company Sinapsi. A security vulnerability in Sinapsi eSolar Light allows a remote attacker to read the HTML source code in the mail-configuration page to obtain a clear-text password and use it for...
E-Detective Lawful Interception System - Multiple Vulnerabilities
Exploit for php platform in category web applications Advisory: E-Detective Lawful Interception System multiple security vulnerabilities Date: 14/06/2015 CVE: unassigned Authors: Mustafa Al-Bassam https://musalbas.com slipstream/RoL https://twitter.com/TheWack0lian Software: Decision Group...
CVE-2015-4355
Cross-site request forgery CSRF vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors...