Microsoft SharePoint CVE-2013-1290 Information Disclosure Vulnerability

Description Microsoft SharePoint is prone to a remote information-disclosure vulnerability. Attackers may be able to exploit this issue to gain access to potentially sensitive information that may aid in further attacks. Technologies Affected Microsoft SharePoint Server 2013 Recommendations Run a...

Hewlett-Packard Intelligent Management Center JavaService Information Disclosure Vulnerability

This vulnerability allows remote attackers to obtain sensitive information on vulnerable installations of HP Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the communication channel between the JavaService server and th...

Microsoft Windows CVE-2013-1291 OpenType Font Parsing Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. Successful exploits will allow attackers to cause the affected computer to stop responding and reboot, resulting in a denial-of-service condition. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Ava...

Debian Security Advisory DSA 2653-1 (icinga - buffer overflow)

It was discovered that Icinga, a host and network monitoring system, contains several buffer overflows in the history.cgi CGI program. OpenVAS Vulnerability Test $Id: deb2653.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2653-1 using nvtgen 1.0 Script version: 1.0...

Feds do not need court warrants to Track your Car with GPS device

The US government is claiming that authorities do not need court warrants to affix GPS devices to vehicles to monitor their every move. t's been more than a year since a Supreme Court decision established that affixing a GPS tracking device to a vehicle constitutes a search under the constitution...

GAO: Flaws in IRS Network Could Put Taxpayer Information in Jeopardy

The United States Government Accountability Office GAO believes that “serious weaknesses remain” in the ways that the Internal Revenue Service handles its internal network, problems that could directly implicate taxpayer data according to a report the regulatory group released on Friday. The...

SonicWall Multiple Products skipSessionCheck Authentication Bypass

Added: 03/18/2013 CVE: CVE-2013-1359 BID: 57445 OSVDB: 89347 Background Dell SonicWALL has several management and reporting solutions which provide a centralized architecture for creating and managing security policies, providing real-time monitoring and alerts, and delivering compliance and usag...

GroundWork monarch_scan.cgi OS Command Injection

This module exploits a vulnerability found in GroundWork 6.7.0. This software is used for network, application and cloud monitoring. The vulnerability exists in the monarchscan.cgi where user controlled input is used in the perl qx function. This allows any remote authenticated attacker, regardle...

Verax NMS Hardcoded Private Key

Verax NMS Hardcoded Private Key CVE-2013-1352 I. BACKGROUND ---------------------- Verax NMS provides a service-oriented, unified management & monitoring of networks, applications and infrastructure enabling quick problem detection, root-cause analysis, reporting and automating recovery, reducing...

CVE-2013-1140

The vulnerability CVE-2013-1140 affects Cisco’s Security Monitoring, Analysis, and Response System (MARS). It stems from improper handling of XML External Entity (XXE) in the XML parser, allowing unauthenticated, remote attackers to read arbitrary files via an external entity declaration and an e...

CVE-2013-1135

Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.0 is affected by a DoS due to processing malformed TLS messages on TCP ports 9043 and 9443. The root cause is an excessive CPU/resource consumption when handling abnormal TLS traffic, leading to monitoring outage. Exp...

'Six Strikes' System Flags P2P Piracy and Throttles Broadband Connections

The entertainment industry is teaming with five major Internet service providers to this week launch a new Copyright Alert System that will first warn online pirates and then start to strangle bandwidth of repeat offenders. Dubbed “Six Strikes,” the new system began roll out Monday, putting...

[Hashkill 0.3.1] Password Cracker Tool Released

Hashkill is an opensource hash cracker for Linux that uses OpenSSL. Currently it supports 4 attack methods dictionary, bruteforce, hybrid. Hashkill has 35 plugins for different types of passwords ranging from simple hashes like MD5 and SHA1 to passworded ZIP files and private SSL key passphrases...

Study Shows One in Four Who Receive Data Breach Letter Become Fraud Victims

A study released Wednesday shows one in four consumers who receive a data breach letter become the victim of identity fraud. That statistic represented 12.6 million victims last year — one million more than the year before, according to the 2013 Identity Fraud Report released by Javelin Strategy ...

Microsoft Internet Explorer InsertEleme Use-After-Free Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer LsGetTrailInfo Use-After-Free Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

SCADA, ICS Bug Brokering Mirrors IT Vulnerability Market

SAN JUAN, Puerto Rico – The world of SCADA and industrial control system vulnerabilities is starting to mirror that of IT security, not only in the demonstration and exploitation of zero-day vulnerabilities, but in the brokering of flaws and exploits between hackers and organizations interested i...

Lockheed Martin's Steve Adegbite on Cyber Intelligence Driven Defense

Steve Adegbite of Lockheed Martin discussed the need for a more intelligent method of network defense and how monitoring attackers and learning from their methods can be a valuable exercise...

HP Diagnostics Server Detection

The remote host is running HP Formerly Mercury Diagnostics Server, an application performance monitoring solution. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64473; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Diagnostics Server...

How the RSA Attackers Swung and Missed at Lockheed Martin

SAN JUAN, PUERTO RICO–The attack that resulted in the compromise of RSA’s SecurID database in 2011 had a lot of ramifications and sent shockwaves through much of the security industry. But it could have had much broader consequences had the security team at Lockheed Martin not discovered the same...