CVE-2015-7805

Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file...

How to Build a Successful Incident Response Plan

The fight to protect your company’s data isn’t for the faint of heart. As an embattled IT warrior, with more systems, apps, and users to support than ever before, keeping everything up and running is a battle in itself. When it comes to preventing the worst-case scenario from happening, you need...

CVE-2015-7183

Integer overflow in the PLARENAALLOCATE implementation in Netscape Portable Runtime NSPR in Mozilla Network Security Services NSS before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to execute...

Piwik Analytics Detection

The script sends a HTTP request to the server and attempts to identify Piwik and its version from the reply. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Vulnerability Identified in Genomic Data Sharing Network

A vulnerability in a network that processes genomic data could pave the way to some global genetic databases being hacked, and open the door to some serious privacy issues. Experts claim the problem lies in The Beacon Project, a network run by a coalition, Global Alliance for Genomics and Health,...

CVE-2013-2470

creationtimestamp| type| source ---|---|--- 2015-10-15 22:07:38+00:00| seen| MISP/56201e1d-f4dc-4ddd-8049-4f2e950d210b...

CVE-2015-6684

Adobe Reader/Acrobat on Windows and macOS vulnerable to a use-after-free (CVE-2015-6684) that allows arbitrary code execution. Affected: Reader 10.x up to 10.1.16, Acrobat 11.x up to 11.0.13, and Classic/Continuous lines before 2015.006.30094 and 2015.009.20069, respectively. Root cause: use-afte...

VK.com: Способ узнать имя человека и ВУЗ удаленной страницы

Выбираем любую удаленную страницу. 2. Например, открываем http://vk.com/id55555 3. Видим сообщение о том, что "Страница удалена, либо еще не создана" и никакой информации более. 4. Воспользуемся widgetsubscribe.php с одним лишь параметром oid 5. https://vk.com/widgetsubscribe.php?oid=55555 6...

Network Security Testing: Evil Foca

Evil Foca is a tool for security pentesters and auditors whose purpose it is to test security in IPv4 and IPv6 data networks. The software automatically scans the networks and identifies all devices and their respective network interfaces, specifying their IPv4 and IPv6 addresses as well as the...

CVE-2015-6305

creationtimestamp| type| source ---|---|--- 2015-09-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38289...

Microsoft Lync Server Detection (HTTP)

The script sends a HTTP request to the server and attempts to identify Microsoft Lync Server. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2015-0536

creationtimestamp| type| source ---|---|--- 2015-08-21 13:00:41+00:00| seen| MISP/55d720e0-f5c8-4290-ba7f-289f0a00020f...

CVE-2015-4321

creationtimestamp| type| source ---|---|--- 2015-08-21 13:00:41+00:00| seen| MISP/55d720e0-f5c8-4290-ba7f-289f0a00020f...

CVE-2015-6530

creationtimestamp| type| source ---|---|--- 2015-08-21 13:00:41+00:00| seen| MISP/55d720e0-f5c8-4290-ba7f-289f0a00020f...

CVE-2015-4532

creationtimestamp| type| source ---|---|--- 2015-08-21 13:00:41+00:00| seen| MISP/55d720e0-f5c8-4290-ba7f-289f0a00020f...

Roundcube Webmail Detection (HTTP)

HTTP based detection of Roundcube Webmail. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH SPDX-FileCopyrightText: Improved code and additional detection routines since 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Linux Kernel Local Denial of Service Vulnerability (CNVD-2015-05215)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux Kernel suffers from a local denial of service vulnerability. A local attacker could exploit the vulnerability to cause a memory leak, resulting in a denial of service...

[SECURITY] Fedora 21 Update: suricata-2.0.8-1.fc21

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

[SECURITY] Fedora 22 Update: suricata-2.0.8-1.fc22

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

Security Advisory - Two Privilege Escalation Vulnerabilities in Huawei Mate 7 Smartphones

The tzdriver module of Huawei Mate 7 smartphone has an input check error, which allows the user-mode application to modify kernel-mode memory data and maybe make system break down or application elevate privilege. Vulnerability ID: HWPSIRT-2015-03011 These Vulnerabilities have been assigned Commo...