jetlib.sec » Tags » trustwave

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

14 items tagged "trustwave"

Related tags: webdefend [+], manager appliance [+], security [+], database [+], enterprise [+], usa [+], static database [+], software versions [+], privilege escalation vulnerability [+], escalation [+], enterprise manager [+], database password [+], wendel [+], steve ocepek [+], spiderlabs [+], security report [+], security advisory [+], penetration testers [+], pan track [+], owasp [+], oracle [+], global security [+], global [+], g. henrique [+], europe [+], advisory [+], touchy feely [+], thing [+], information disclosure [+], information [+], charles henderson steve ocepek [+], brushing your teeth [+]

• February 18, 2012
• 9:03

  Trustwave Global Security Report

   » ‎ Packet Storm Security Recent Files
  These slides are from the Trustwave Global Security Report as presented at the OWASP AppSec USA 2011 conference.

  Tags:  global trustwave security usa owasp security-report global-security  

• 9:03

  Trustwave Global Security Report

   » ‎ Packet Storm Security Misc. Files
  These slides are from the Trustwave Global Security Report as presented at the OWASP AppSec USA 2011 conference.

  Tags:  global trustwave security usa owasp security-report global-security  

• September 19, 2011
• 10:35

  [Paper] Need a hug? I'm secure

   » ‎ SecDocs
  Authors: Charles Henderson Steve Ocepek
  Tags: exploiting
  Event: Black Hat USA 2010
  Abstract: 0-days are a lot of fun. Whether it’s an overlooked buffer overflow, a poorly implemented encryption algorithm, or something downright bizarre, the thrill of breaking things is the reason most of us get hooked. That’s why Trustwave’s Global Security report is a bit sobering. Why are so many of these systems still vulnerable to SQL injection, LANMAN hash recovery, and default password guessing? And is an NFS exploit considered a 7665-day? But this isn’t about getting bent out of shape about the state of information security. Without being too preachy, this talk is about what we can do to help turn things around. Because if there’s one thing that is clear, the need for information security will only increase. And we’re all feeling the growing pains. The end of 2009 brought with it a great deal of controversy over the effectiveness of information security. We’re all pretty frustrated about it. But that’s the thing about growing up – you start to realize your own limitations. Like dieticians and dentists, we watch people make bad choices and wonder where we went wrong. And like them, we need to focus on the fundamentals: eating healthy, brushing your teeth, and blocking port 139. But man, that sounds pretty boring. So maybe it’s time for a new approach. Maybe it’s not so much about the message, but how it’s getting delivered. And maybe there’s something we can do about that. After all, we’re pretty secure folks – we can handle the touchy-feely stuff, right?

  Tags:  thing information security charles-henderson-steve-ocepek usa touchy-feely trustwave brushing-your-teeth  

• May 27, 2011
• 7:16

  TrustWave WebDefend Static Database Password

   » ‎ Packet Storm Security Advisories
  Trustwave WebDefend suffers from a static database password vulnerability. It was discovered in various DLLs and EXEs and affects WebDefend Enterprise Manager Appliance / Console software versions 5.0 and 4.0.

  Tags:  trustwave webdefend database manager-appliance static-database database-password software-versions  

• 7:16

  TrustWave WebDefend Static Database Password

   » ‎ Packet Storm Security Recent Files
  Trustwave WebDefend suffers from a static database password vulnerability. It was discovered in various DLLs and EXEs and affects WebDefend Enterprise Manager Appliance / Console software versions 5.0 and 4.0.

  Tags:  trustwave webdefend database manager-appliance static-database database-password software-versions  

• 7:16

  TrustWave WebDefend Static Database Password

   » ‎ Packet Storm Security Misc. Files
  Trustwave WebDefend suffers from a static database password vulnerability. It was discovered in various DLLs and EXEs and affects WebDefend Enterprise Manager Appliance / Console software versions 5.0 and 4.0.

  Tags:  trustwave webdefend database manager-appliance static-database database-password software-versions  

• May 23, 2011
• 0:00

  Vuln: Trustwave WebDefend Enterprise Multiple Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Trustwave WebDefend Enterprise Multiple Information Disclosure Vulnerabilities

  Tags:  trustwave webdefend enterprise information-disclosure  

• April 27, 2011
• 9:22

  Trustwave WebDefend Enterprise Manager Appliance 5.0 Privilege Escalation

   » ‎ Packet Storm Security Exploits
  Trustwave WebDefend Enterprise Manager Appliance versions 5.0 and below suffer from a remote privilege escalation vulnerability.

  Tags:  trustwave webdefend enterprise manager-appliance privilege-escalation-vulnerability enterprise-manager escalation  

• 9:22

  Trustwave WebDefend Enterprise Manager Appliance 5.0 Privilege Escalation

   » ‎ Packet Storm Security Recent Files
  Trustwave WebDefend Enterprise Manager Appliance versions 5.0 and below suffer from a remote privilege escalation vulnerability.

  Tags:  trustwave webdefend enterprise manager-appliance privilege-escalation-vulnerability enterprise-manager escalation  

• 9:22

  Trustwave WebDefend Enterprise Manager Appliance 5.0 Privilege Escalation

   » ‎ Packet Storm Security Misc. Files
  Trustwave WebDefend Enterprise Manager Appliance versions 5.0 and below suffer from a remote privilege escalation vulnerability.

  Tags:  trustwave webdefend enterprise manager-appliance privilege-escalation-vulnerability enterprise-manager escalation  

• June 20, 2010
• 6:05

  [Paper] Oracle, Interrupted: Stealing Sessions and Credentials

   » ‎ SecDocs
  Authors: Wendel Guglielmetti Henrique Steve Ocepek
  Tags: Oracle
  Event: Black Hat EU 2010
  Abstract: In a world of free, ever-present encryption libraries, many penetration testers still find a lot of great stuff on the wire. Database traffic is a common favorite, and with good reason: when the data includes PAN, Track, and CVV, it makes you stop and wonder why this stuff isn’t encrypted by default. However, despite this weakness, we still need someone to issue queries before we see the data. Or maybe not… after all, it’s just plaintext. Wendel G. Henrique and Steve Ocepek of Trustwave’s SpiderLabs division offer a closer look at the world’s most popular relational database: Oracle. Through a combination of downgrade attacks and session take-over exploits, this talk introduces a unique approach to database account hijacking. Using a new tool, thicknet, released at Black Hat Europe, the team will demonstrate how deadly injection attacks can be to database security.

  Tags:  oracle database wendel g.-henrique steve-ocepek europe penetration-testers pan-track trustwave  

• 6:05

  [Slides] Oracle, Interrupted: Stealing Sessions and Credentials

   » ‎ SecDocs
  Authors: Wendel Guglielmetti Henrique Steve Ocepek
  Tags: Oracle
  Event: Black Hat EU 2010
  Abstract: In a world of free, ever-present encryption libraries, many penetration testers still find a lot of great stuff on the wire. Database traffic is a common favorite, and with good reason: when the data includes PAN, Track, and CVV, it makes you stop and wonder why this stuff isn’t encrypted by default. However, despite this weakness, we still need someone to issue queries before we see the data. Or maybe not… after all, it’s just plaintext. Wendel G. Henrique and Steve Ocepek of Trustwave’s SpiderLabs division offer a closer look at the world’s most popular relational database: Oracle. Through a combination of downgrade attacks and session take-over exploits, this talk introduces a unique approach to database account hijacking. Using a new tool, thicknet, released at Black Hat Europe, the team will demonstrate how deadly injection attacks can be to database security.

  Tags:  oracle database wendel g.-henrique steve-ocepek europe penetration-testers pan-track trustwave  

• February 16, 2010
• 9:00

  Bugtraq: RE: Trustwave's SpiderLabs Security Advisory TWSL2010-001

   » ‎ SecurityFocus Vulnerabilities
  RE: Trustwave's SpiderLabs Security Advisory TWSL2010-001

  Tags:  advisory spiderlabs security security-advisory trustwave  

• February 11, 2010
• 15:00

  Bugtraq: RE: Trustwave's SpiderLabs Security Advisory TWSL2010-001

   » ‎ SecurityFocus Vulnerabilities
  RE: Trustwave's SpiderLabs Security Advisory TWSL2010-001

  Tags:  advisory spiderlabs security security-advisory trustwave