Crowti Cryptowall 3.0 Ransomware Moving in I2P Network

A new strain of the Crowti ransomware, also dubbed Cryptowall 3.0, was spotted by researchers early this week after a quiet period during the holiday season. The twist to these recent infections is that the malware communicates over the I2P anonymity network. French researcher Kafeine confirmed...

Malicious Ads on Yahoo, AOL, Trigger CryptoWall Infections

Attackers have been leveraging the FlashPack Exploit Kit to peddle the CryptoWall 2.0 ransomware on unsuspecting visitors to sites such as Yahoo, The Atlantic and AOL. Researchers believe that for about a month the malvertising campaign hit up to 3 million visitors and netted the attackers $25,00...

Mozilla 1024-Bit Deprecation Leaves 107,000 Sites Untrusted

When Firefox 32 shipped this week, Mozilla also officially ended its support of 1024-bit certificate authority certificates in its trusted store. While it still takes a considerable amount of resources to factor and crack a 1024-bit RSA key, important organizations such as NIST have been advising...

SSL Certificate Chain Contains RSA Keys Less Than 2048 bits (PCI DSS)

At least one of the X.509 certificates sent by the remote host has a key that is shorter than 2048 bits. According to industry standards set by the Certification Authority/Browser CA/B Forum, certificates issued after January 1, 2014 must be at least 2048 bits. Some browser SSL implementations ma...

CVE-2013-2048

The CVE-2013-2048 issue affects ownCloud Server prior to 5.0.6, where an insufficient permission check allows authenticated users to execute arbitrary API commands via unspecified vectors, with CSRF enabling remote command execution. The root cause is an inadequate access-control check on API com...

Ubuntu Update for curl USN-2048-1

Check for the Version of curl OpenVAS Vulnerability Test $Id: gbubuntuUSN20481.nasl 8542 2018-01-26 06:57:28Z teissa $ Ubuntu Update for curl USN-2048-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Ubuntu: Security Advisory (USN-2048-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2048-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Expands Encryption Use in Cloud Services to Thwart Surveillance

In response to the growing set of revelations about the NSA’s surveillance methods and alleged compromise of some large technology vendors’ services, Microsoft is taking a number of steps to try and reassure customers about the integrity of the company’s offerings and to greatly expand the use of...

Google upgrades SSL certificates to 2048-bit RSA

Google announced today that it has completed the upgrade of all its SSL certificates to 2048-bit RSA or better, coming in more than a month ahead of schedule. “We have completed this process which will allow the industry to start removing trust from weaker 1024-bit keys next year,” Google securit...

CryptoLocker Ransomware demands $300 or Two Bitcoins to decrypt your files

If you're a daily computer user, you're likely aware of all the threats you face every day online in the form of viruses and malware. CryptoLocker, a new ransomware malware, began making the rounds several months ago. This ransomware is particularly nasty because infected users are in danger of...

Google Swapping 1024-bit Keys for 2048-bit Keys

Google announced this week that it has begun upgrading its SSL certificates from 1024-bit keys to 2048-bit keys, a move that should help add an extra layer of security for anyone who uses the search giant’s services. According to a post on Google’s Developers blog by Identity Team member Tim Bray...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2048)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2048 advisory. - ext4: fix undefined behavior in ext4fillflexinfo Xi Wang orabug 16020245 CVE-2012-2100 - Divide by zero in TCP congestion control Algorithm Jespe...

Adobe ColdFusion远程拒绝服务漏洞

BUGTRAQ ID: 55499 CVE ID: CVE-2012-2048 Adobe ColdFusion是一个动态Web服务器。 Adobe ColdFusion v10及之前版本存在远程拒绝服务漏洞，攻击者可利用此漏洞使受影响应用崩溃，执行任意代码。 0 Adobe ColdFusion 9.x Adobe ColdFusion 8.x Adobe ColdFusion 10.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb12-21）以及相应补丁: apsb12-21：Security update: Hotfix available f...

MinaliC Webserver Denial of Service Vulnerability

MinaliC Webserver is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MinaliC Webserver v1.0 Denial of Service Vulnerability

Exploit for windows platform in category dos / poc ====================================================== MinaliC Webserver v1.0 Denial of Service Vulnerability ====================================================== ------------------------------------------------------------------------...

MinaliC WebServer 1.0 - Denial of Service

------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Denial Of Service Download................http://sourceforge.net/projects/minalic/ Release Date............10/24/2010 Tested On...............Windows XP...

CVE-2010-2048

CVE-2010-2048 affects the Drupal Heartbeat module (6.x) prior to 6.x-4.9. The vulnerability is an XSS that could be exploited by remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The provided documents do not include exploitation details, affected product/...

Ubuntu: Security Advisory (USN-612-8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS00-094 Microsoft IIS Phone Book Service Overflow

This is an exploit for the Phone Book Service /pbserver/pbserver.dll described in MS00-094. By sending an overly long URL argument for phone book updates, it is possible to overwrite the stack. This module has only been tested against Windows 2000 SP1. This module requires Metasploit:...