Threat Outbreak Alert: Fake Financial Documents Email Messages on April 9, 2014

Medium Alert ID: 33737 First Published: 2014 April 10 13:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claims to contain financial documents email messages for the recipient. The text in the email message attempt...

Threat Outbreak Alert: Fake Fund Transfer Notification Email Messages on December 5, 2013

Medium Alert ID: 32058 First Published: 2013 December 6 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain payment transfer details for the recipient. The text in the e-mail message attempts to...

PT-2022-2030

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw was found in the Linux kernel in the netfilter subsystem, specifically in the linux/net/netfilter/nf tables api.c file. This issue allows a local user to cause an out-of-bounds...

PT-2022-2031

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the use of an uninitialized pointer nft do chain in the nf tables module of the Linux kernel's netfilter subsystem. This can cause a use-after-free condition,...

kernel: netfilter: null pointer dereference in nf_ct_frag6_reasm()

net/ipv6/netfilter/nfconntrackreasm.c in the Linux kernel before 2.6.34, when the nfconntrackipv6 module is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via certain types of fragmented IPv6 packets...

PT-2012-4231 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.34 Description: The issue allows remote attackers to cause a denial of service, resulting in a system crash due to a NULL pointer dereference. This occurs when the nf conntrack ipv6 module is enabled and the...

PT-2011-4476

Name of the Vulnerable Software and Affected Versions Measuresoft ScadaPro versions 4.0.0 and earlier Description The issue allows remote attackers to read, modify, or delete arbitrary files. This is achieved through multiple directory traversal vulnerabilities in the service.exe component via...

IPv6 fragments bypass in nf_conntrack netfilter code

nfconntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IPCTESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments...

CVE-2005-4488: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 iid, 2 iid2, 3 r, 4 cart, 5 str, 6 nf, and 7 a parameters...