Fedora Web Site Hacked, But the Servers Undamaged !

An attacker who had credentials and the use of taxpayer Fedora Fedora server, but the project leaders say the assailants apparently managed to compromise any software or servers. An attacker has attempted to compromise the servers for the Fedora Project, the community version of Red Hat Enterpris...

Scam Sites Demanding SMS Payment For Fake Flash, Firefox Downloads

Phishers and scammers have developed a new tactic for separating victims from their money that involves getting them to pay for software that’s normally free, such as Mozilla Firefox or Adobe Flash. The new scam is offering users the opportunity to download applications such as Flash, Firefox and...

Microsoft Windows Task Scheduler Elevation of Privilege Vulnerability (2305420)

This host is missing a critical security update according to Microsoft Bulletin MS10-092. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for gnome-web-photo FEDORA-2010-16897

Check for the Version of gnome-web-photo OpenVAS Vulnerability Test Fedora Update for gnome-web-photo FEDORA-2010-16897 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Fedora Update for moodle FEDORA-2010-16764

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2010-16764 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Savannah GNU Site Compromised

A site belonging to the Savannah GNU free software archive was attacked recently, leading to a compromise of encrypted passwords and enabling the attackers to access restricted project material. The compromise was the result of a SQL injection attack against the savannah.gnu.org site within the...

Mandriva Update for openssl MDVSA-2010:238 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:238 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for cvs FEDORA-2010-16599

Check for the Version of cvs OpenVAS Vulnerability Test Fedora Update for cvs FEDORA-2010-16599 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Symantec IM Manager Multiple SQL Injection Vulnerabilities

Symantec IM Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit can allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities i...

Cisco Security Advisory: Cisco IOS Software Internet Group Management Protocol Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Internet Group Management Protocol Denial of Service Vulnerability Advisory ID: cisco-sa-20100922-igmp http://www.cisco.com/warp/public/707/cisco-sa-20100922-igmp.shtml Revision 1.0 For Public Release 2010...

Vulnerability in Remote Procedure Call Could Allow Remote Code Execution (982802)

This host is missing a critical security update according to Microsoft Bulletin MS10-066. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for quagga FEDORA-2010-14009

Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2010-14009 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Nmap NSE: SMB System Info

This script attempts to get the information about the remote system from the registry. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-system-info.nse OpenVAS Vulnerability Test $Id: gbnmapsmbsysteminfo.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB System Info...

Nmap NSE: SMB Brute

This script attempts to get SMB login credentials by guessing usernames and passwords. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-brute.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbbrute.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB Brute NSE script...

Cisco IOS Software WebVPN and SSLVPN Vulnerabilities - Cisco Systems

Cisco IOS software contains two vulnerabilities within the Cisco IOS WebVPN or Cisco IOS SSLVPN feature SSLVPN that can be remotely exploited without authentication to cause a denial of service condition. Both vulnerabilities affect both Cisco IOS WebVPN and Cisco IOS SSLVPN features: - Crafted...

Vulnerability In Crypto Library - Cisco Systems

"A vulnerability has been discovered in a third-party cryptographic library that is used by a number of Cisco products. This vulnerability may be triggered when a malformed Abstract Syntax Notation One ASN.1 object is parsed. Due to the nature of the vulnerability it may be possible, in some case...

Cisco IOS Interface Blocked by IPv4 Packets - Cisco Systems

Cisco routers and switches running Cisco IOS software and configured to process Internet Protocol version 4 IPv4 packets are vulnerable to a Denial of Service DoS attack. Multiple IPv4 packets with specific protocol fields sent directly to the device may cause the input interface to stop processi...

Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak - Cisco Systems

A vulnerability in the Cisco implementation of Multicast Virtual Private Network MVPN is subject to exploitation that can allow a malicious user to create extra multicast states on the core routers or receive multicast traffic from other Multiprotocol Label Switching MPLS based Virtual Private...

Cisco uBR10012 Series Devices SNMP Vulnerability - Cisco Systems

Cisco uBR10012 series devices automatically enable Simple Network Management Protocol SNMP read/write access to the device if configured for linecard redundancy. This can be exploited by an attacker to gain complete control of the device. Only Cisco uBR10012 series devices that are configured for...

Cisco IOS cTCP Denial of Service Vulnerability - Cisco Systems

A series of TCP packets may cause a denial of service DoS condition on Cisco IOS devices that are configured as Easy VPN servers with the Cisco Tunneling Control Protocol cTCP encapsulation feature. Cisco has released free software updates that address this vulnerability. No workarounds are...