NTP Amplification Flaw To Blame For Gaming DDoS Attacks

US-CERT has issued an advisory that warns enterprises about distributed denial of service attacks flooding networks with massive amounts of UDP traffic using publicly available network time protocol NTP servers. Known as NTP amplification attacks, hackers are exploiting something known as the...

MS13-100: Description of the security update for Office Web Apps Server: December 10, 2013

The security update addresses the vulnerabilities by correcting how SharePoint server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS13-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS13-100: Description of the security update for SharePoint Server 2013 (coreserverloc): December 10, 2013

The security update addresses the vulnerabilities by correcting how SharePoint server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS13-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

SuSE 11.2 Security Update : MozillaFirefox (SAT Patch Number 8545)

Mozilla Firefox was updated to the 17.0.10ESR release, fixing various bugs and security issues : - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption und...

SuSE 11.2 Security Update : MozillaFirefox (SAT Patch Number 8545)

Mozilla Firefox was updated to the 17.0.10ESR release, fixing various bugs and security issues : - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption und...

JVN#71256611: ASP.NET vulnerable to open redirect

ASP.NET provided by Microsoft contains an open redirect vulnerability due to an issue in the login component. Therefore a web application that implements ASP.NET may be vulnerable. Impact The user who accesses the web application that implements ASP.NET may be redirected to an arbitrary website. ...

Fedora 18 : kernel-3.11.7-100.fc18 (2013-20748)

The 3.11.7 stable update contains a number of important fixes across the tree Various bug and CVE fixes The 3.11.6 stable update contains a number of fixes across the tree. The 3.11.5 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has...

Mozilla Suite: Update to October 2013 release (important)

MozillaFirefox was updated to Firefox 25.0. MozillaThunderbird was updated to Thunderbird 24.1.0. Mozilla XULRunner was updated to 17.0.10esr. Mozilla NSPR was updated to 4.10.1. Changes in MozillaFirefox: requires NSS 3.15.2 or above MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592...

IT Security Horror Story #1: The Case of the Phantom Blood Red Team

An unsuspecting Fortune 100 company allows horrible creatures into their building and systems during a Red Team engagement. READ MORE…IF YOU DARE -...

CVE-2013-6027

Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/toolsmisc.xgi...

Stack overflow

Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/toolsmisc.xgi...

CVE-2013-6027

Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/toolsmisc.xgi...

CVE-2013-6027

CVE-2013-6027 concerns a stack-based buffer overflow in the RuntimeDiagnosticPing function on D-Link DIR-100 routers (/bin/webs). The vulnerability allows remote authenticated administrators to execute arbitrary commands by sending a long set/runtime/diagnostic/pingIp parameter to Tools/tools_mis...

PT-2013-5932 · D Link · D-Link Dir-100

Name of the Vulnerable Software and Affected Versions: D-Link DIR-100 routers affected versions not specified Description: A stack-based buffer overflow issue exists in the RuntimeDiagnosticPing function, located in /bin/webs on D-Link DIR-100 routers. This could potentially allow remote...

D-Link PLANEX COMMUNICATIONS - RuntimeDiagnosticPing() Remote Stack Buffer Overflow

D-Link PLANEX COMMUNICATIONS - RuntimeDiagnosticPing Remote Stack Buffer Overflow source: https://www.securityfocus.com/bid/63234/info Multiple Vendors are prone to a stack-based buffer-overflow vulnerability. Exploiting this vulnerability may allow attackers to execute arbitrary code in the...

D-Link User-Agent Backdoor Scanner

This module attempts to find D-Link devices running Alphanetworks web interfaces affected by the backdoor found on the User-Agent header. This module has been tested successfully on a DIR-100 device with firmware version v1.13. Module Options msf use auxiliary/scanner/http/dlink/useragentbackdoor...

Fedora 18 : kernel-3.10.14-100.fc18 (2013-18364)

The 3.10.14 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] Fedora 18 Update: kstars-4.10.5-1.fc18

KStars is a Desktop Planetarium. It provides an accurate graphical simulation of the night sky, from any location on Earth, at any date and time. The display includes up to 100 million stars, 13,000 deep-sky object s, all 8 planets, the Sun and Moon, and thousands of comets and asteroids...

[SECURITY] Fedora 17 Update: kernel-3.9.8-100.fc17

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

China Builds World's Fastest Supercomputer

China has developed a new supercomputer known as Tianhe-2 which is twice as fast as US and Japanese systems has been measured at speeds of 30.65 petaflops or 74 percent faster than the current holder of the world's-fastest-supercomputer title. Titan, the U.S. Department of Energy's fastest...