SuSE 10 Security Update : IBM Java 1.6.0 (ZYPP Patch Number 8100)

IBM Java 1.5.0 has been updated to SR13-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

CVE-2012-1507

creationtimestamp| type| source ---|---|--- 2012-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37145 2012-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37143 2012-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37144...

CVE-2012-2513

creationtimestamp| type| source ---|---|--- 2012-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18853 2012-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20705...

'The Hackers Conference 2012' to be held in New Delhi

'The Hackers Conference 2012' to be held in New Delhi The Biggest Hacking Mania has arrived. The Hackers Conference 2012 will be held in New Delhi on July 29. THC 2012 is expected to be the first open gathering of Blackhat hackers in India who will debate latest security issues with the top...

CVE-2012-4258

creationtimestamp| type| source ---|---|--- 2012-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18843 2012-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19132...

CVE-2012-4282

creationtimestamp| type| source ---|---|--- 2012-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37136...

Flashback Creators May Be Raking in $10K a Day

Unprotected users visiting a page hosting the much-discussed Flashback Trojan could be earning some serious cash for the malware’s creators, according to new research from Symantec. In a post to the company’s Security Response blog, Symantec notes the Flashback Trojan could be earning up to $10,0...

CVE-2012-2599

creationtimestamp| type| source ---|---|--- 2012-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18800 2012-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20062 2020-02-20 20:52:14+00:00| seen| https://t.me/cibsecurity/9979...

CVE-2012-3834

creationtimestamp| type| source ---|---|--- 2012-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18800 2012-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20062...

CVE-2012-3835

creationtimestamp| type| source ---|---|--- 2012-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18800 2012-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20062 2020-02-20 20:41:10+00:00| seen| https://t.me/VulnerabilityNews/12632 2020-02-20...

CVE-2012-4251

creationtimestamp| type| source ---|---|--- 2012-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37127 2012-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37125 2012-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37128 2012-04-27...

CVE-2012-4253

creationtimestamp| type| source ---|---|--- 2012-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37129 2012-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37126...

Microsoft: Conficker Attacks Rebound

Old pieces of malware–especially successful ones–don’t really die. They typically will just sort of fade into the background as newer attacks come to the fore and grab the headlines. Such is the case for one of the more notorious headline-grabbing pieces of malware of all time: Conficker. Not onl...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

AST-2012-006: Remote Crash Vulnerability in SIP Channel Driver

Asterisk Project Security Advisory - AST-2012-006 Product Asterisk Summary Remote Crash Vulnerability in SIP Channel Driver Nature of Advisory Remote Crash Susceptibility Remote Authenticated Sessions Severity Moderate Exploits Known No Reported On April 16, 2012 Reported By Thomas Arimont Posted...

Researchers Find Bug in SMS App That Can Lead to iPhone Exploits

Researchers have identified a bug in an application that can enable attackers potentially to gain control of a victim’s iPhone. The app in question, TreasonSMS, enables users to send SMS messages from a desktop Web browser by using their iPhones as Web servers. The bug lies in the way that the...

ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities EMC Identifier: ESA-2012-018, DPA-14718 CVE Identifier: CVE-2012-0406 CVE Identifier: CVE-2012-0407 Severity Rating: CVSS v2 Base Score: See below for CVSS Base Scores for individual...

VUPEN Security Research - Adobe Flash Player NetStream Remote Code Execution Vulnerability (APSB12-07 / CVE-2012-0773)

VUPEN Security Research - Adobe Flash Player NetStream Remote Code Execution Vulnerability APSB12-07 / CVE-2012-0773 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Adobe Flash Player is a cross-platform browser-based...

Analysis: Flashback Spread Via Social Engineering, Then Java Exploits

Kaspersky Lab‘s latest analysis of the Mac OS X Flashback botnet reveals that the botnet’s malware was spread via drive-by downloads on hacked WordPress web sites. From September 2011 until February 2012, the Flashback creators distributed the trojan through compromised WordPress sites that...

Oracle Patches 88 Vulnerabilities, Including Some that Allow Remote Exploits Without Authentication

Oracle yesterday released 88 security fixes for vulnerabilities — including several that allow for remote access without authentication — across its portfolio as part of its quarterly Critical Patch Update. “Due to the threat posed by a successful attack, Oracle strongly recommends that customers...