3381 matches found
CVE-2014-0923
IBM MessageSight 1.0 and 1.1 are affected by CVE-2014-0923. The issue is triggered by crafted MQTT authentication data, causing the MessageSight daemon to restart (Denial of Service) due to vulnerability in the MQTT handling path. IBM's remediation is to upgrade to firmware 1.1.0.0-IBM-IMA-IT0101...
IBM WebSphere MQ Telemetry安全绕过漏洞
Bugtraq ID:65897 CVE ID:CVE-2013-4054 IBM WebSphere MQ Telemetry将WebSphere MQ提供的通用信息主干扩展到了大范围的远程遥感器、传动器和遥测设备。 IBM WebSphere MQ Telemetry不正确过滤用户提交的URL请求，允许远程攻击者利用漏洞绕过限制访问WebContent目录之外的文件内容。 0 IBM WebSphere MQ Telemetry 7.5 厂商补丁： IBM ----- IBM WebSphere MQ Telemetry 7.5.0.3已经修复该漏洞，建议用户下载更新：...
PT-2014-2734
Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ version 7.5 before 7.5.0.3 Description A directory traversal issue in WMQ Telemetry allows remote attackers to read arbitrary files by using a crafted URI. Recommendations For IBM WebSphere MQ version 7.5 before 7.5.0.3, updat...
CVE-2013-4054: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI...
Microsoft Expands MAPP Program to Incident Response Teams
Microsoft is expanding its MAPP program that shares attack and protection information with other security vendors and will now be sharing some data with incident responders, as well. The new system will enable organizations such as CERTs and internal IR teams to exchange information on specific...
Description of the Office Web Apps Server 2013 update: April 9, 2013
None None...
Description of the Office Web Apps Server update: April 9, 2013 (KB2738048)
None None...
Schneider Electric Accutech Manager Heap Overflow
Schneider Electric Accutech Manager Server Heap Overflow PoC RFManagerService - Port: 2537 I think this is the same vuln that ExodusIntel discovered. Credit also goes to Aaron Portnoy, ExodusIntel. The patch has not been released yet. Evren Yalcin, Signalsec Ltd. www.signalsec.com Download app:...
Schneider Electric Accutech Manager - Heap Overflow (PoC)
Schneider Electric Accutech Manager Server Heap Overflow PoC RFManagerService - Port: 2537 I think this is the same vuln that ExodusIntel discovered. Credit also goes to Aaron Portnoy, ExodusIntel. The patch has not been released yet. Evren Yalcin, Signalsec Ltd. www.signalsec.com Download app:...
Predictive Security Analytics Tool Available Free to Researchers
SAN JUAN, Puerto Rico – Dan Hubbard has lately been a regular face at a lot of big data meet-ups. He’s also often been the lone security face at these meet-ups, which are dominated by analytics, search, social media and advertising professionals. That may change soon for the CTO of DNS and securi...
War Texting : Hackers Unlock Car Doors Via SMS
War Texting : Hackers Unlock Car Doors Via SMS Don Bailey and Mathew Solnik, Two hackers have found a way to unlock cars that use remote control and telemetry systems like BMW Assist, GM OnStar, Ford Sync, and Hyundai Blue Link. These systems communicate with the automaker's remote servers via...
Azure File Sync Agent v14 Release – October 2021
None None...
Security update 1970-01-01
...
Update for customer experience and diagnostic telemetry (KB3022345)
None None...
Update for customer experience and diagnostic telemetry (KB3080149)
None None...
Update for customer experience and diagnostic telemetry (KB3068708)
None None...
Security update 1970-01-01
...
Azure File Sync Agent v16 Release - January 2023
None None...