McAfee SaaS Endpoint Protection 'MyAsUtil5.2.0.603.dll' ActiveX远程代码执行漏洞

Bugtraq ID: 49088 McAfee SaaS Endpoint Protection是一款提供了用于拦截病毒、间谍软件、Web 威胁和黑客攻击的基本保护功能。 MyAsUtil5.2.0.603.dll提供的ActiveX控件存在安全漏洞。首先跨站脚本可用于绕过MyASUtil.SecureObjectFactory.CreateSecureObject中实现的域执行策略来创建一个MyASUtil.InstallInfo实例，之后MyASUtil.InstallInfo.RunUserProgram可用于在系统上执行代码。另外用户系统上多个其他对象和接口可任意使用这个通用机...

SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities

Document Title: =============== SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities Release Date: ============= 2011-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 119 Product & Service Introduction: =============================== Die weltweit groesste SaaS...

SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities

Document Title: =============== SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities Release Date: ============= 2011-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 119 Product & Service Introduction: =============================== Die weltweit groesste SaaS...

Coalfire Systems Speaking at Shared Assessments Summit 2011

Do you know how to ensure reliability and resiliency in cloud and SaaS environments? Join leaders from within the IT outsourcing risk management industry at the Shared Assessments Summit 2011 in Boston on March 29 and 30. Coalfire is participating in this summit because the value of managing risk...

MVSA-10-002 - Google Message Security SaaS - Multiple XSS vulnerabilities

Security Advisory: MVSA-10-002 Vendor: Google Service: Google Message Security SaaS powered by Postini - Security Console Admin Console - Message Center Classic - Message Center II Vulnerabilities: Multiple Cross-Site Scripting XSS Risk: High Attack Vector: From Remote Authentication: Required...

MVSA-10-001 - Google Message Security SaaS - SQL Injection vulnerabilities

Security Advisory: MVSA-10-001 Vendor: Google Service: Google Message Security SaaS powered by Postini - Message Center II Vulnerabilities: SQL Injection Risk: High Attack Vector: From Remote Authentication: Required Reference: http://www.ventuneac.net/security-advisories/MVSA-10-001...

Google Message Security SaaS Cross Site Scripting

Security Advisory: MVSA-10-002 Vendor: Google Service: Google Message Security SaaS powered by Postini - Security Console Admin Console - Message Center Classic - Message Center II Vulnerabilities: Multiple Cross-Site Scripting XSS Risk: High Attack Vector: From Remote Authentication: Required...

Google Message Security SaaS multiple security vulnerabilities

Crossite scripting, SQL injection...

Cacti Multiple Parameter Cross Site Scripting Vulnerabilities

Cacti Multiple Parameter Cross Site Scripting Vulnerabilities I. BACKGROUND --------------------- "Cacti is a complete network graphing solution designed to harness the power of RRDTool's data storage and graphing functionality. Cacti provides a fast poller, advanced graph templating, multiple da...

The Berkeley breach: Is SaaS the answer?

One recent Friday afternoon I took time off to visit two new health providers: a new dentist nearer my home and an orthopedic to look at my lateral epicondylitis. In both cases, as a new patient, I filled in page after page of medical history and personal information, including my Social Security...