CVE-2013-0681

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via malformed data in a formatted text...

Command injection

The DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote servers to cause a denial of service incorrect pointer access and client cra...

Design/Logic Flaw

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 do not properly handle exceptions, which allows remote attackers to cause a denial of service application crash or possibly execute...

CVE-2013-0681

CVE-2013-0681 affects Cogent Real-Time Systems products (Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub Windows before 6.4.22, DataHub QuickTrend before 7.3.0). The issue is a NULL pointer dereference in the parser when handling malformed data in a formatted text command ...

CVE-2013-0681

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via malformed data in a formatted text...

CVE-2013-0683

CVE-2013-0683 concerns Cogent Real-Time Systems DataHub family. The DataSim/DataPid demonstration clients, OPC DataHub, Cascade DataHub (Windows), and DataHub QuickTrend are vulnerable to remote DoS via malformed data in a formatted text command, caused by a NULL pointer dereference in the parser...

CVE-2013-0680

CVE-2013-0680 is a stack-based buffer overflow in Cogent Real-Time Systems’ DataHub web server that affects Cogent DataHub < 7.3.0, OPC DataHub < 6.4.22, Cascade DataHub for Windows < 6.4.22, and DataHub QuickTrend

CVE-2013-0682

Cogent DataHub vulnerability (CVE-2013-0682) affects Cogent DataHub < 7.3.0, OPC DataHub < 6.4.22, Cascade DataHub for Windows < 6.4.22, and DataHub QuickTrend

Attackers Shifting to Delivering Unknown Malware Via FTP and Web Pages

The bulk of “unknown” malware is being delivered to systems via Web-based attacks, proxies and FTP sessions, according to a study released by Palo Alto Networks this week. The study dubbed “The Modern Malware Review,” found more than 26,000 malware samples, and focuses on what the firm calls...

ClipShare 4.1.1 - gid Blind SQL Injection

ClipShare 4.1.1 - gid Blind SQL Injection Exploit Title: ClipShare 4.1.1 gmembers.php Blind SQL Injection Vulnerability Exploit Author: Esac Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 Official site: http://www.clip-share.com Software License: Commercial. all versions ar...

Real Networks RealPlayer堆缓冲区溢出漏洞(CVE-2013-1750)

BUGTRAQ ID: 58539 CVECAN ID: CVE-2013-1750 RealPlayer是网上收听收看实时音频、视频和Flash的工具。 RealPlayer在处理MP4文件时存在错误，可被利用造成堆缓冲区溢出。成功利用后可允许执行任意代码。 0 RealPlayer 15.x 厂商补丁： Real Networks ------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://service.real.com/realplayer/security/...

SonicWall Multiple Products skipSessionCheck Authentication Bypass

Added: 03/18/2013 CVE: CVE-2013-1359 BID: 57445 OSVDB: 89347 Background Dell SonicWALL has several management and reporting solutions which provide a centralized architecture for creating and managing security policies, providing real-time monitoring and alerts, and delivering compliance and usag...

Ryan McGeehan and Chad Greene

Ryan McGeehan, the director of incident response at Facebook and Chad Greene, the manager of the Facebook CERT on Thursday both explained how the social network has planned red team exercises in the past to prepare the company’s security team for a real attack...

[Snort 2.9.4.1] Network Intrusion Detection System

Snort is a free and open source network intrusion prevention system NIPS and network intrusion detection system NIDS . Snort having the ability to perform real-time traffic analysis and packet logging on Internet Protocol IP networks. Snort performs protocol analysis, content searching, and conte...

[Snort 2.9.4.1] Network Intrusion Detection System

Snort is a free and open source network intrusion prevention system NIPS and network intrusion detection system NIDS . Snort having the ability to perform real-time traffic analysis and packet logging on Internet Protocol IP networks. Snort performs protocol analysis, content searching, and conte...

Nmap NSE 6.01: p2p-conficker

Checks if a host is infected with Conficker.C or higher, based on Conficker's peer to peer communication. When Conficker.C or higher infects a system, it opens four ports: two TCP and two UDP. The ports are random, but are seeded with the current week and the IP of the infected host. By determini...

The Top Six Ways You Will Benefit From Event Log Monitoring

Systems on your network log data 24/7/365. Simply allowing logs to take up disk space, reviewing them only after something has happened and deleting logs when you run low on disk space are all the strategies of an admin doomed to always being in firefighting mode, reacting to bad things when they...

[NetShareMonitor] Network File Share Monitoring Software

| Net Share Monitor is the free software to Monitor your Shared Files from unknown users in the network. --- Whenever any remote user accesses your Shared Files, NetShareMonitor alerts you by blinking the icon in the systray or making the alert sound. For each connection, it shows the IP address,...

CVE-2013-0652

GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call...

Design/Logic Flaw

GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call...