CVE-2016-8580

PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes...

CVE-2016-8583

CVE-2016-8583 affects AlienVault OSSIM/USM prior to version 5.3.2. The vulnerability is a reflected XSS in the vulnerability scan scheduler where multiple GET parameters (e.g., jobname, timeout, sched_id, targets[]) in /ossim/vulnmeter/sched.php can reflect attacker-supplied input. The issue stem...

PT-2016-7512

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM and USM versions prior to 5.3.2 Description The vulnerability scan scheduler in AlienVault OSSIM and USM contains a reflected XSS issue due to multiple vulnerable GET parameters. Recommendations For versions prior to 5.3.2,...

PT-2016-7510

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM and USM versions prior to 5.3.2 Description A persistent XSS issue exists in the login process, specifically in the User-Agent header, allowing an attacker to steal session IDs of logged-in users when an administrator views...

CVE-2016-8580: Improper Access Control

PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes...

CVE-2016-8583: Improper Neutralization of Input During Web Page Generation

Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to reflected XSS...

CVE-2016-8582: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOADFILE...

PT-2016-7511

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM and USM versions prior to 5.3.2 Description A vulnerability exists that allows an attacker to execute an arbitrary SQL query, potentially leading to the retrieval of database information or the reading of local system files vi...

PT-2016-7509

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM and USM versions prior to 5.3.2 Description The issue allows for arbitrary PHP code execution via magic methods in included classes, which can be exploited through PHP object injection vulnerabilities found in multiple widget...

CVE-2016-8581: Improper Neutralization of Input During Web Page Generation

A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal session IDs of logged in users when the current sessions are viewed by an administrator...

CVE-2016-6913

Cross-site scripting XSS vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php...

Cross site scripting

Cross-site scripting XSS vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php...

CVE-2016-6913

Cross-site scripting XSS vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php...

PT-2016-7164

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM versions prior to 5.3 AlienVault USM versions prior to 5.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the back parameter to the "ossim/conf/reload.php"...

CVE-2016-6913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php...

AlienVault USM/OSSIM 5.2 Cross Site Scripting

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AlienVault USM/OSSIM Vendor URL: www.alienvault.com Type: Cross-Site Scripting CWE-79 Date found: 2016-05-24 Date published: 2016-08-23 CVSSv3 Score: 5.4...

FreeBSD-SA-16:06.bsnmpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:06.bsnmpd Security Advisory The FreeBSD Project Topic: Insecure default snmpd.config permissions Category: contrib Module: bsnmpd Announced: 2016-01-14...

AlienVault Unified Security Management: Real-Time Threat Detection Starting on Day 1

As organizations expand their IT infrastructure to match their evolving business models and meet changing regulatory requirements, they often find that their networks have become extremely complex and challenging to manage. A primary concern for many IT teams is detecting threats in the mountain ...

How to Build a Successful Incident Response Plan

The fight to protect your company’s data isn’t for the faint of heart. As an embattled IT warrior, with more systems, apps, and users to support than ever before, keeping everything up and running is a battle in itself. When it comes to preventing the worst-case scenario from happening, you need...

How to Detect IE Zero-day Exploit Used to Deploy Korplug Malware

Recently, Microsoft issued an Emergency patch for a zero-day vulnerability in Internet Explorer that is being exploited to deploy Korplug malware on vulnerable PCs. Korplug, a known variant of PlugX, is a Trojan that creates a backdoor used for information stealing on infected computers. In one o...