1536 matches found
Design/Logic Flaw
Unspecified vulnerability in IBM QRadar Security Information and Event Manager SIEM 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors...
CVE-2013-2970
Unspecified vulnerability in IBM QRadar Security Information and Event Manager SIEM 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors...
CVE-2013-2970
CVE-2013-2970 affects IBM QRadar SIEM (7.0 and 7.1) and is a command-injection flaw exploitable by an authenticated user to run OS commands, potentially gaining remote shell access. The issue originates from a vulnerability allowing limited command execution by a webservices user. Remediation pro...
CVE-2013-2970
Unspecified vulnerability in IBM QRadar Security Information and Event Manager SIEM 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors...
SolarWinds Log & Event Manager for Log Management and SEIM Security
SolarWinds® Log & Event Manager LEM, a full-function Security & Information Event Management SIEM solution, delivers powerful log management capabilities in a highly affordable, easy-to-deploy virtual appliance. SolarWinds LEM combines real-time log analysis, event correlation, and a groundbreaki...
Alliance Issues Guidance for Cloud-Based SIEM Services
The non-profit Cloud Security Alliance today released guidelines for the nascent Security as a Service SecaaS specialization within the broader realm of cloud computing. The goal, the group says, is to help companies and consumers gain a better handle on how best to evaluate, build and deploy...
Gathering Threat Intelligence With Open Tools
Threat intelligence is one of the go-to buzz phrases for many people in the security industry right now, and it’s thrown in so many contexts and situations, it’s quickly becoming almost meaningless. Most people understand that they need to get better information about what’s happening both on the...
Ossim SIEM v4.0 - Multiple Cross Site Vulnerabilities
Document Title: =============== Ossim SIEM v4.0 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=679 Release Date: ============= 2012-08-13 Vulnerability Laboratory ID VL-ID: ==================================== 679...
Ossim SIEM v4.0 - Multiple Cross Site Vulnerabilities
Document Title: =============== Ossim SIEM v4.0 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=679 Release Date: ============= 2012-08-13 Vulnerability Laboratory ID VL-ID: ==================================== 679...
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting Blind SQL Injection
Alienvault Open Source SIEM OSSIM 3.1 - Reflected Cross-Site Scripting Blind SQL Injection !/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the "url" parameter of "top.php". Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an...
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection
!/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the "url" parameter of "top.php". Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an cookie grabber will allow for the hijacking of the user session:...
Alienvault OSSIM Open Source SIEM 3.1 Multiple Security Vulnerabilities
Exploit for php platform in category web applications Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Contact: email protected Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open Source SIEM 3.1 32bit Vendor URL:...
Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilities
Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Advisory ID: SSCHADV-EDB-2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open Source SIEM 3.1 32bit Vendor URL: http://www.alienvault.com/ Vendo...
Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilities
Alienvault Open Source SIEM OSSIM 3.1 - Multiple Vulnerabilities Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Advisory ID: SSCHADV-EDB-2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open...
Metasploit Pro 4.0 released - Enterprise Integration, Cloud Deployment & Automation
Metasploit Pro 4.0 released - Enterprise Integration, Cloud Deployment & Automation Rapid7 launched Metasploit Pro 4.0, a penetration testing solution that provides security professionals with a better view of their threat landscape by integrating with more than a dozen vulnerability management...
Metasploit Pro 4.0 released - Enterprise Integration, Cloud Deployment & Automation
Metasploit Pro 4.0 released - Enterprise Integration, Cloud Deployment & Automation Rapid7 launched Metasploit Pro 4.0, a penetration testing solution that provides security professionals with a better view of their threat landscape by integrating with more than a dozen vulnerability management...