CVE-2012-3347: Undefined Security Weakness

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment...

Fedora Update for fabric FEDORA-2011-8964

Check for the Version of fabric OpenVAS Vulnerability Test Fedora Update for fabric FEDORA-2011-8964 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Arachni v0.2.1 - penetration testers Framework - latest release

"Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications." This is the official change log: Major performance improvements Major system refactoring and code clean-up Major module API...

Intrinsic Swimage Encore does not securely manage login credentials

Overview Intrinsic Swimage Encore has an unencrypted, hardcoded, default password that could allow an attacker access to protected data. Description Intrinsic Swimage Encore automates remote desktop, server, and device deployment. This product includes both a server and a client solution. The...

avast! Management Server Detection

The remote service appears to be a broadcast listener for avast! Management Server AMS, which is used by avast! Distributed Network Manager ADNM as well as avast! Managed Clients for remote deployment and management of avast! antivirus within an enterprise. C Tenable Network Security, Inc...