Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647...

CVE-2013-4824

HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module contain an authentication bypass in the AccountService RpcServiceServlet (CVE-2013-4824). The vulnerability allows remote attackers to bypass authentication and can enable account creation/manipulation,...

CVE-2013-4825

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to bypass intended access restrictions via unknown vectors, aka ZDI-CAN-1645...

PT-2013-5223

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC affected versions not specified HP IMC Service Operation Management Software Module affected versions not specified Description The issue allows remote attackers to bypass intended access restrictions. It i...

PT-2013-5225

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC versions affected versions not specified HP IMC Service Operation Management Software Module versions affected versions not specified Description A SQL injection issue allows remote attackers to execute...

PT-2013-5222

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC affected versions not specified HP IMC Service Operation Management Software Module affected versions not specified Description The issue allows remote attackers to bypass authentication. The estimated numb...

PT-2013-5224

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC affected versions not specified HP IMC Service Operation Management Software Module affected versions not specified Description The issue allows remote attackers to obtain sensitive information. The estimat...

CVE-2013-4827: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZDI-CAN-1664...

CVE-2013-4826: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647...

CVE-2013-4825: Undefined Security Weakness

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to bypass intended access restrictions via unknown vectors, aka ZDI-CAN-1645...

CVE-2013-4824: Improper Authentication

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-1644...

Debian DSA-2769-1 : kfreebsd-9 - privilege escalation/denial of service

Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-5691 Loganaden Velvindron and Gleb Smirnoff discovered that the...

[security bulletin] HPSBGN02930 rev.1 - HP Intelligent Management Center(iMC) and HP IMC Service Operation Management Software Module, Remote Authentication Bypass, Disclosure of Information, Unauthorized Access, SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03943547 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03943547 Version: 1 HPSBGN02930 rev....

[SECURITY] [DSA-2769-1] kfreebsd-9 security update

---------------------------------------------------------------------- Debian Security Advisory DSA-2769-1 [email protected] http://www.debian.org/security/ Aurelien Jarno October 08, 2013 http://www.debian.org/security/faq -...

13 Anonymous Members indicted and accused of participating in 'Operation Payback'

A U.S. Grand jury indicted and accused 13 members of the hacking group Anonymous for allegedly participating in the cyber attacks against a number of websites as an anti-copyright campaign called "Operation Payback" Hackers took down the sites by inflicting a denial of service, or DDoS, attack,...

13 Anonymous Members indicted and accused of participating in 'Operation Payback'

A U.S. Grand jury indicted and accused 13 members of the hacking group Anonymous for allegedly participating in the cyber attacks against a number of websites as an anti-copyright campaign called "Operation Payback" Hackers took down the sites by inflicting a denial of service, or DDoS, attack,...

Chinese APT Espionage campaign, dubbed 'Icefog' targeted Military contractors and Governments

Kaspersky Lab has identified another Chinese APT campaign, dubbed 'Icefog', who targeted Governmental institutions, Military contractors, maritime / shipbuilding groups, telecom operators, industrial and high technology companies and mass media. The Hacking group behind the attack who carry out...

DEBIAN-CVE-2013-2140

The dispatchdiscardio function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service data loss via filesystem write operations on a read-only disk that supports the 1 BLKIFOPDISCARD aka discard...

Internet Explorer zero-day exploit used watering hole attacks to target Japanese users

Attackers exploiting a zero-day vulnerability CVE-2013-3893 in Microsoft's Internet Explorer browser and served them on compromised popular Japanese news websites. According to FireEye, at least three major Japanese media websites were compromised in watering hole attacks, dubbed Operation...

Internet Explorer zero-day exploit used watering hole attacks to target Japanese users

Attackers exploiting a zero-day vulnerability CVE-2013-3893 in Microsoft’s Internet Explorer browser and served them on compromised popular Japanese news websites. According to FireEye, at least three major Japanese media websites were compromised in watering hole attacks, dubbed Operation...