Design/Logic Flaw

Cisco IOS 15.14M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service device hang by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid...

CVE-2014-3347

Cisco 1800 Series ISR devices running IOS 15.1(4)M2 with ISDN BRI enabled are affected by CVE-2014-3347. The issue resides in the hardware entropy collection module: an interrupt timer collision triggered during entropy collection (knowledge of the ISDN phone number) can cause the hardware encryp...

CVE-2014-3347

Cisco IOS 15.14M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service device hang by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid...

WordPress 3.5.1, Denial of Service

Version 3.5.1 latest of popular blogging engine WordPress suffers from remote denial of service vulnerability. The bug exists in encryption module class-phpass.php. The exploitation of this vulnerability is possible only when at least one post is protected by a password. Time frames: 31.05.2013...

Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting Cross-Site Request Forgery

Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting Cross-Site Request Forgery Exploit Title: Trend Micro InterScan Messaging Security Suite Stored XSS and CSRF Date: 13/09/2012 Exploit Author: modpr0be modpr0beatspentera.com Vendor Homepage: http://www.trendmicro.com...

Bitdefender 2011 File Vault - Buffer Overflow Vulnerability

Document Title: =============== Bitdefender 2011 File Vault - Buffer Overflow Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/262.wmv View: http://www.youtube.com/watch?v=98eA1cIAO8k Release Date: ============= 2011-09-01 Vulnerability Laboratory ...

Drupal AES Encryption Module Information Disclosure Vulnerability

The host is running Drupal AES Encryption Module and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbdrupalaesmoduleinfodiscvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Drupal AES Encryption Module Information Disclosure Vulnerability Authors: Sooraj KS...

Drupal AES Encryption Module Information Disclosure Vulnerability (SA-CONTRIB-2011-005) - Active Check

Drupal AES Encryption Module is prone to an information disclosure vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

warftpd.170b1.passwd.txt

War FTP Deamon 1.70 beta1 saves passwords in 'clear' text. Article Summary War FTP Deamon 1.70 beta1 stores all the user database, including passwords in 'clear' text. Making it possible for anyone with access to the file to gain knowlage of privileged's people passwords. Article Details War FTP...

Unauthenticated crypto and weak IV in Magento\Framework\Encryption

More info at http://www.openwall.com/lists/oss-security/2016/07/19/3...