Cisco WebEx Training Center Registered Attendee Email Enumeration Vulnerability

A vulnerability in the training registration page in Cisco WebEx Training Center could allow an unauthenticated, remote attacker to enumerate email addresses of registered attendees. The vulnerability is due to registration error messages that allow a user to determine that an email address...

Cisco WebEx Training Center Open Redirect Vulnerability

A vulnerability in Cisco WebEx Training Center could allow an unauthenticated, remote attacker to cause the Cisco WebEx Training Center to issue a redirect to an arbitrary attacker-supplied URL. The vulnerability is due to an open redirect issue in Cisco WebEx Training Center. An attacker could...

Cisco WebEx Training Center Training Session Number Disclosure Vulnerability

A vulnerability in Cisco WebEx Training Center could allow an unauthenticated, remote attacker to view the session number for trainings that require host approval before the host approves the attacker as an attendee. The vulnerability is due to inappropriate disclosure of sensitive information in...

Cisco WebEx Training Center Registration ID Exposure Vulnerability

A vulnerability in Cisco WebEx Training Center could allow an unauthenticated, remote attacker to gather the registration ID of other users. The vulnerability is due to inappropriate disclosure of sensitive information to unauthenticated users. An attacker could exploit this vulnerability by...

[OWASP GoatDroid] Project that will help educate security to application developers Android

OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications:...

Phishing Email Exposes Patient Data of 90,000

After opening a malicious attachment in a phishing email, an employee at University of Washington Medicine in Seattle may have exposed the personal information of more than 90,000 Harborview Medical Center and University of Washington Medical Center patients. The breach took place in October...

Want to be the Part of History? Just be a part of E-HACK

E-HACK is an Information Security Workshop, organized by infySEC. The workshop aims at creating awareness about INFORMATION SECURITY by showing in what all ways information or data can be stolen. Meddle in cyber-warfare, battle with our machine master mind who will throw challenges on web...

Want to be the Part of History? Just be a part of E-HACK

E-HACK is an Information Security Workshop, organized by infySEC. The workshop aims at creating awareness about INFORMATION SECURITY by showing in what all ways information or data can be stolen. Meddle in cyber-warfare, battle with our machine master mind who will throw challenges on web...

China military to conduct training on digital warfare

As concerns are growing regarding Chinese hacking attacks, the country will undergo its first digital war games. Only two days after the U.S. has attributed cyber espionage attacks against U.S. government and business entities to the Chinese Government and Military, it was announced that the...

Hack Battle at 'The Hacker Conference 2013' with CTF365

The Hacker Conference partnered up with CTF365 to provide the best CTF experience during the conference. While trying to find out more about their product and also about their CTF surprise, I got an interview with Marius Corici Co-founder and CEO for CTF365. Q: November 2012 was when you first...

Indian Government approved National Cyber Security Policy

The IT sector has become one of the most significant growth catalysts for the Indian economy. The government approved the National Cyber Security Policy that aims to create a secure computing environment in the country and build capacities to strengthen the current set up with focus on manpower...

[REMnux] A Linux Distribution for Malware Analysis

REMnux incorporates a number of tools for analyzing malicious executables that run on Microsoft Windows, as well as browser-based malware, such as Flash programs and obfuscated JavaScript. This popular toolkit includes programs for analyzing malicious documents, such PDF files, and utilities for...

SAProuter - Authentication Bypass

Application: SAP Network Interface Router SAProuter Versions Affected: 39.3 SP4 7100.0.0.201 – Win64/Linux x8664, 40.4 Vendor URL: http://www.sap.com Bugs: Authentication bypass Exploits: NO Reported: 23.03.2013 Vendor response: 24.03.2013 Date of Public Advisory: 25.11.2013 Reference: SAP Securi...

Experts Tell Congress Serious Deterrence Needed to Impede Foreign Cyber Attacks

The House Foreign Affairs Subcommittee on Europe, Eurasia, and Emerging Threats typically is more concerned with economics and political issues than cyber attacks, but the members spent this morning in a hearing trying to come up with an answer to a fairly straightforward, but thorny question: Wh...

Software Security Programs May Not Be Worth the Investment for Many Companies

SAN FRANCISCO–The discipline of software security has been gaining traction in a lot of organizations both large and small in recent years, thanks in part to the success that vendors such as Microsoft, Adobe and others have had with it. However, for many companies, the time and money spent on...

Hacker charged for funding terrorist groups

A hacker 'Cahya Fitrianta' sentenced to eight years in prison by the West Jakarta District Court judges for hacking into many economic websites to steal money and funding that money to terrorist groups. He is also ordered to pay a Rp 500 million $51,000 fine. He is charged with breaking into many...

Hacker charged for funding terrorist groups

A hacker 'Cahya Fitrianta' sentenced to eight years in prison by the West Jakarta District Court judges for hacking into many economic websites to steal money and funding that money to terrorist groups. He is also ordered to pay a Rp 500 million $51,000 fine. He is charged with breaking into many...

Cisco WebEx Training Center 权限限制绕过漏洞(CVE-2013-1110)

CVE ID:CVE-2013-1110 Cisco WebEx Training Center是一款电子教学,在线培训和在线课堂解决方案。 Cisco WebEx Training Center存在安全漏洞，允许通过验证的远程攻击者利用漏洞提交特制的URL绕过权限限制，禁用或启用培训中心录制功能。 0 Cisco WebEx Training Center 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1110...

CVE-2013-1108

Cisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL, aka Bug ID CSCzu81064...

CVE-2013-1110

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...