UBUNTU-CVE-2013-4495

The sendthemail function in server/svrmail.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email -M switch to qsub...

CVE-2013-5556

Cisco Nexus 1000V CVE-2013-5556 is a local-authenticated command-execution vulnerability in the license-installation module. Crafted input to the install all iso command can let an authenticated local attacker gain privileges and run arbitrary shell commands. Affected are Cisco Nexus 1000V switch...

CVE-2013-5556: Undefined Security Weakness

The license-installation module on the Cisco Nexus 1000V switch 4.21SV15.2b and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.21SM15.1 for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.21VSG11 for Nexus 1000V switches allows local users to gain privileges and execute arbitrary...

PT-2013-5637

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V switch versions 4.21SV15.2b and earlier for VMware vSphere Cisco Nexus 1000V switch version 5.21SM15.1 for Microsoft Hyper-V Cisco Virtual Security Gateway version 4.21VSG11 for Nexus 1000V switches Description The issue allo...

Cisco Catalyst 3750-X Series Switch Default Credentials Vulnerability (CSCue92286)

The remote Cisco device potentially contains an issue which, due to default credentials on the Cisco Service Module, could allow a local attacker to gain unauthorized root access. TRUSTED...

postgresql: Insecure switch parsing

Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service file corruption, and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection...

New home for the Security Group blog

News New home for the Security Group blog Share October 31st, 2013 Welcome to the new home of the Opera Security Group. We have changed our blogging platform. For more more information regarding the switch, please see this post. If you received this blog post in your feed reader, you do not need ...

Cisco Catalyst 3750-X Series Switch Default Credentials Vulnerability

A vulnerability in the Service Module for Cisco Catalyst 3750-X Series Switches could allow an authenticated, local attacker to gain root access to the kernel running on the Cisco Service Module. The vulnerability is due to default credentials on the Cisco Service Module. An attacker could exploi...

Cisco Small Business 300 Series Managed Switch Detection (SNMP)

This script performs SNMP based detection of Cisco Small Business 300 Series Managed Switch. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

CVE-2013-5516

The Media Snapshot implementation on Cisco TelePresence Multipoint Switch CTMS devices allows remote authenticated users to cause a denial of service device reload by sending many Media Snapshot requests at the time of a meeting termination, aka Bug ID CSCuh44796...

CVE-2013-5516: Undefined Security Weakness

The Media Snapshot implementation on Cisco TelePresence Multipoint Switch CTMS devices allows remote authenticated users to cause a denial of service device reload by sending many Media Snapshot requests at the time of a meeting termination, aka Bug ID CSCuh44796...

PT-2013-5599

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS devices affected versions not specified Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload. This can be achieved by sending many Media...

Cisco TelePresence Multipoint Switch Media Snapshot Denial of Service Vulnerability

A vulnerability in the Media Snapshot code of Cisco TelePresence Multipoint Switch CTMS could allow an authenticated, remote attacker to cause the reload of the affected system, creating a denial of service DoS condition. The vulnerability is due to a failure in handling requests for Media Snapsh...

Hewlett-Packard 2620 Switch Series Admin Account CSRF Vulnerability

Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability Date: 26.09.2013r. Exploit Author: Hubert Grądek PL Software Link: download link if available Tested on: HP-E2620 24-PoEP // RA.15.05.0006,ROMRA.15.10 CVE : No CVE exists - 0day exploit This is private...

Hewlett-Packard (HP) 2620 Switch Series. Edit Admin Account - Cross-Site Request Forgery

Hewlett-Packard HP 2620 Switch Series. Edit Admin Account - Cross-Site Request Forgery Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability Date: 26.09.2013r. Exploit Author: Hubert GrÄ…dek PL Software Link: download link if available Tested on: HP-E2620...

Hewlett-Packard (HP) 2620 Switch Series. Edit Admin Account - Cross-Site Request Forgery

Exploit Title: Hewlett-Packard 2620 Switch Series. Edit Admin Account - CSRF Vulnerability Date: 26.09.2013r. Exploit Author: Hubert GrÄ…dek PL Software Link: download link if available Tested on: HP-E2620 24-PoEP // RA.15.05.0006,ROMRA.15.10 HTTP Headers: http://IPADDR/html/json.html Host: IPADD...

Cisco Content Switching Module Layer 7 Load Balancing DoS

According to its self-reported version number, the Cisco Content Switching Module in the remote switch may be affected by a denial of service vulnerability. The vulnerability exists when the CSM or CSM-S is configured for layer 7 load balancing. An attacker can trigger this vulnerability when the...

Cisco TelePresence Multipoint Switch Multiple Vulnerabilities (cisco-sa-20120711-ctms)

According to its self-reported version, the version of Cisco TelePresence Multipoint Switch Server installed on the remote host is potentially affected by multiple vulnerabilities : - By sending specially crafted IP packets at a high rate, it may be possible to crash some of the services running ...

PT-2013-3613

Name of the Vulnerable Software and Affected Versions FreeSWITCH version 1.2 Description The issue is related to multiple buffer overflows in the switch perform substitution function in switch regex.c, which can be exploited by remote attackers. This can cause a denial of service crash and...

NASDAQ Patches Reported XSS Vulnerability

A NASDAQ representative confirmed this morning that a cross-site scripting vulnerability on the exchange’s website discovered by an ethical hacker has been patched. The issue was reported on Sept. 2 by Ilia Kolochenko, chief executive of High-Tech Bridge, a Swiss penetration testing company...