CVE-2012-3297

Cross-site scripting XSS vulnerability in the embedded HTTP server in the Service Console in IBM Tivoli Monitoring 6.2.2 before 6.2.2-TIV-ITM-FP0009 and 6.3.2 before 6.2.3-TIV-ITM-FP0001 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

Nationwide, Allied Insurance Breach Hits 1.1 Million Users

An estimated 1.1 million consumers are at risk of identity theft after thieves broke into servers belonging to Nationwide and Allied insurance companies. Victims include current policyholders and those who sought insurance quotes. The breach took place Oct. 3 and was discovered the same day...

ManageEngine Applications Manager Detection

The remote web server hosts ManageEngine Applications Manager, a web-based server and application performance monitoring software product written in Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63157; scriptversion"1.5";...

Sensitive information of 1 Million people breached at Nationwide Insurance

Nationwide Insurance was breached last week and Sensitive information of about 1 Million people is at risk. The FBI is investigating a breach, including policy and non-policy holders. Nationwide mailed notices to all affected individuals last Friday. Insurance Commissioner Ralph Hudgens issued th...

Nagios XI Network Monitor 2011R1.9 SQL Injection Vulnerability

Nagios XI Network Monitor version 2011R1.9 suffers from a remote blind SQL injection vulnerability. ======= Summary ======= Name: Nagios XI Network Monitor - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00194 Discoverer: Daniel Compton Vendor: Nagios Vendor Reference: 0000282...

PT-2013-72: XML External Entities Resolution vulnerability in Microsoft Office Excel

The specialists of the Positive Research center have detected an XML External Entities Resolution vulnerability in Microsoft Office Excel. The vulnerability is possible due to unsafe parsing of XML external entities. If an attacker makes a victim open a specially crafted XML document, Microsoft...

Websense Proxy Filter Bypass

Websense Proxy Filter Bypass 1. Advisory Information Date published: 2012-11-25 Vendors contacted: Websense Release mode: Coordinated release Vendor was notified 2. Vulnerability Information Class: Filter Bypass Remotely Exploitable: Yes 3. Software Description Internet access management system...

[SECURITY] Fedora 18 Update: pcp-3.6.10-1.fc18

Performance Co-Pilot PCP provides a framework and services to support system-level performance monitoring and performance management. The PCP open source release provides a unifying abstraction for all of the interesting performance data in a system, and allows client applications to easily...

Fedora Update for pcp FEDORA-2012-18686

Check for the Version of pcp OpenVAS Vulnerability Test Fedora Update for pcp FEDORA-2012-18686 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Alog CMS system XSS arbitrary File Download read vulnerability-vulnerability warning-the black bar safety net

| Alog CMS Background any download any remove any of the columns of the directory 漏洞 文件 :admin/mod/uploadfile.mod.php $baseDir = SITEROOT.'static/upload/'; $currentDir = $GET'dir' ? $GET'dir' : $POST'dir' ? $POST'dir' : "; //without any filter $currentPath = $baseDir.$ currentDir; Any download...

PHP Server Monitor Cross Site Scripting

Author: loneferret of Offensive Security Product: PHP Server Monitor Version: 2.0.1 and maybe older versions Google Dork: intext="Powered by PHP Server Monitor v2.0.1" yes people have made this available on the web Software Download: http://sourceforge.net/projects/phpservermon/ Tested on: Ubuntu...

More Flame Modules Could Be Lurking

BROOKLYN, NY–After years of research and investigation into the cyber-espionage attacks that began with the discovery of Stuxnet and continued with Flame, Duqu and Gauss, there still are many details that are unknown. While researchers have a pretty good handle on many of the tools’ capabilities,...

VMware vSphere Hypervisor Vulnerability

Core Security - Corelabs Advisory 1. Advisory Information Title: VMware vSphere Hypervisor Vulnerability Advisory ID: CORE-2012-0710 Advisory URL: Date published: 2012-11-15 Date of last update: 2012-11-16 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Information...

[SECURITY] Fedora 18 Update: pcp-3.6.9-1.fc18

Performance Co-Pilot PCP provides a framework and services to support system-level performance monitoring and performance management. The PCP open source release provides a unifying abstraction for all of the interesting performance data in a system, and allows client applications to easily...

Link hijacking attack one, two, three-vulnerability warning-the black bar safety net

Blog post author: lake2 TSRC Release date: 2012-11-09 Blog post content: With application security development, we are more concerned about application security vulnerabilities, in fact, in the application layer below the Transport Layer there are also many security risks and the security risks...

[SECURITY] Fedora 16 Update: pcp-3.6.9-1.fc16

Performance Co-Pilot PCP provides a framework and services to support system-level performance monitoring and performance management. The PCP open source release provides a unifying abstraction for all of the interesting performance data in a system, and allows client applications to easily...

[SECURITY] Fedora 17 Update: pcp-3.6.9-1.fc17

Performance Co-Pilot PCP provides a framework and services to support system-level performance monitoring and performance management. The PCP open source release provides a unifying abstraction for all of the interesting performance data in a system, and allows client applications to easily...

Fedora Update for pcp FEDORA-2012-17050

Check for the Version of pcp OpenVAS Vulnerability Test Fedora Update for pcp FEDORA-2012-17050 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

UK Intelligence recruiting brilliant minds for eavesdropping social networks

Government eavesdropping and security agency GCHQ is developing new tools to sift through them for nuggets of useful data from Facebook, Twitter, LinkedIn, Google+, Pinterest. All of these are the source of valuable intelligence that the UK's intelligence agencies want to know about. During a vis...

Alliance Issues Guidance for Cloud-Based SIEM Services

The non-profit Cloud Security Alliance today released guidelines for the nascent Security as a Service SecaaS specialization within the broader realm of cloud computing. The goal, the group says, is to help companies and consumers gain a better handle on how best to evaluate, build and deploy...