8413 matches found
Comerica Bank Sued for Failed 2-Factor Authentication
A metals supply company in Michigan is suing its bank for poor security practices after a successful phishing attack against an employee allowed thieves to steal more than half a million dollars last year. Read the full article. KrebsonSecurity...
Cisco switch password-cracking-vulnerability warning-the black bar safety net
Use the console cable is connected toswitch, through HyperTerminal or Secure CRT connection to switch; 2. Press and hold down the switch on the front panel MODE button, plug in the switch power supply; 3. About 4 0 seconds after the release of the Mod 1. Use the console cable is connected...
HP Power Manager Detection
HP Power Manager, a web interface for managing an HP uninterruptible power supply UPS, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42800; scriptversion"1.14"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Power Manag...
Botmasters Holding Summer Clearance Sale
How much does a bot cost these days? Like everything else in our economy, the price of a bot-infected PC fluctuates significantly, based on supply, demand, volume purchased and any number of other factors. But according to research done by the folks at Cisco, bots can be had for as little as 10...
多个供应商SizerOne ActiveX控件'AddTab'方法缓冲区溢出漏洞
BUGTRAQ ID: 33148 CNCAN ID：CNCAN-2009010809 ComponentOne SizerOne是一款集成了四个控件的组件工具，包括了两个调整分割控件用来控制所有的调整分割任务，一个个Tabbling控件用来快速创建类似记事本和OutLook风格的Tab，一个字符分割控件自动处理分割和剪切字符的工作。 ComponentOne SizerOne包含的控件对'AddTab'方法处理存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -TAB...
FreeBSD Security Advisory (FreeBSD-SA-07:09.random.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:09.random.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2006-3585
Multiple cross-site scripting XSS vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the 1 login parameter in admin/cms/index.php, 2 unspecified parameters in the "Supply news" page in formmail.php, 3 the URL in the "Site statistics" page, and...
CVE-2006-3585
Multiple cross-site scripting XSS vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the 1 login parameter in admin/cms/index.php, 2 unspecified parameters in the "Supply news" page in formmail.php, 3 the URL in the "Site statistics" page, and...
rpc3telnet.txt
Vulnerability found by Flare@CiSO Greets to nolimit, COREiSO, news, and class101. Versions Tested: RPC-3 Telnet Host - Revision F 3.05, C 1998 This is a basic login-bypass vulnerability found in the RPC-3 Telnet Host v 3.05 made by "Bay Technical Associates". This telnet daemon is used by many...
Bay Technical Associates telnet server logon bypass
Vulnerability found by Flare@CiSO Greets to nolimit, COREiSO, news, and class101. Versions Tested: RPC-3 Telnet Host - Revision F 3.05, C 1998 This is a basic login-bypass vulnerability found in the RPC-3 Telnet Host v 3.05 made by "Bay Technical Associates". This telnet daemon is used by many...
Debian 2.1 - apcd Symlink
Debian 2.1 - apcd Symlink source: https://www.securityfocus.com/bid/958/info A vulnerability exists in the apcd package, as shipped in Debian GNU/Linux 2.1. By sending the apcd process a SIGUSR1, a file will be created in /tmp called upsstat. This file contains information about the status of the...
Debian 2.1 - apcd Symlink
source: https://www.securityfocus.com/bid/958/info A vulnerability exists in the apcd package, as shipped in Debian GNU/Linux 2.1. By sending the apcd process a SIGUSR1, a file will be created in /tmp called upsstat. This file contains information about the status of the APC device. This file is...
