13672 matches found
The hack will take place next month the General Assembly announced the Tesla car, and vulnerability-vulnerability and early warning-the black bar safety net
! Hack will take place next month the General Assembly announced the Tesla car, and vulnerability Tesla motors may be the world's most networked consumer car, but also affected by the hacking community's close attention. Global researchers are looking for Tesla engineering on the weaknesses, not...
Debian DLA-272-1 : python-django security update
Several vulnerabilities were discovered in Django, a high-level Python web development framework : CVE-2015-2317 Daniel Chatfield discovered that python-django, a high-level Python web development framework, incorrectly handled user-supplied redirect URLs. A remote attacker could use this flaw to...
NSA Releases Open Source Network Security Tool for Linux
The United States National Security Agency NSA has released a network security tool for Government and the private sectors to help secure their networks against cyber attacks. Dubbed Systems Integrity Management Platform SIMP, the tool is now publicly available on the popular source code sharing...
Code injection
The SRX Network Security Daemon nsd in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service crash via a crafted DNS response...
CVE-2015-5363
The SRX Network Security Daemon nsd in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service crash via a crafted DNS response...
Fedora 22 : rubygem-moped-1.5.3-1.fc22 (2015-11070)
Security fix for CVE-2015-4411 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Juniper Junos SRX Series Network Security Daemon DoS (JSA10692)
According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the network security daemon nsd due to a flaw that occurs when handling DNS response messages for name resolution requests. An attacker can exploit this, via a rogue...
[SECURITY] Fedora 22 Update: openvas-libraries-8.0.3-2.fc22
openvas-libraries is the base library for the OpenVAS network security scanner...
Threat Outbreak Alert RuleID16640: Email Messages Distributing Malicious Software on July 13, 2015
Medium Alert ID: 39916 First Published: 2015 July 14 12:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16640 may contain the following files: Name | Siz...
Juniper Networks Junos OS SRX NSD Denial of Service Vulnerability
Junos OS is prone to a DoS vulnerability in the Network Security Daemon. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Impero Education Pro - System Remote Command Execution
Impero Education Pro - System Remote Command Execution / If you're unsure what Impero is, it's essentially a corporate/educational RAT. Vendor site: https://www.imperosoftware.co.uk/ They recently were in the news about how they implemented "anti-radicalisation" shit or something. They had a boot...
Microsoft Windows CVE-2015-2417 Remote Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges within the context of the affected system. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya CallPilot 5.0....
Microsoft Internet Explorer CVE-2015-2408 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
[SECURITY] Fedora 21 Update: openssh-6.6.1p1-13.fc21
SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...
Mozilla Network Security Services Encryption Issue Vulnerability
Mozilla Firefox, Firefox ESR, and Thunderbird are all developed by the Mozilla Foundation in the U.S. Firefox is an open-source web browser; Firefox ESR is an extended support version of Firefox; and Thunderbird is a separate email client from the Mozilla Application Suite. Thunderbird is a...
Debian DLA-269-1 : linux-ftpd-ssl security update
The issue is due to a case of missing brackets in the patch '500-ssl.diff', which causes the execution of 'fcloseNULL' and thus displays as a segmentation fault. The error appears while transmogrifying 'linux-ftpd' into 'linux-ftpd-ssl'. There is no CVE assigned to this issue. The patch was creat...
Firefox ESR < 31.8 Multiple Vulnerabilities (Logjam)
The version of Firefox ESR installed on the remote Windows host is prior to 31.8. It is, therefore, affected by multiple vulnerabilities : - A security downgrade vulnerability exists due to a flaw in Network Security Services NSS. When a client allows for a ECDHEECDSA exchange, but the server doe...
Firefox ESR < 38.1 Multiple Vulnerabilities (Logjam)
The version of Firefox ESR installed on the remote Windows host is prior to 38.1. It is, therefore, affected by multiple vulnerabilities : - A security downgrade vulnerability exists due to a flaw in Network Security Services NSS. When a client allows for a ECDHEECDSA exchange, but the server doe...
Firefox < 39.0 Multiple Vulnerabilities (Logjam)
The version of Firefox installed on the remote Windows host is prior to 39.0. It is, therefore, affected by multiple vulnerabilities : - A security downgrade vulnerability exists due to a flaw in Network Security Services NSS. When a client allows for a ECDHEECDSA exchange, but the server does no...
SOL16863 - Apache vulnerability CVE-2013-5704
Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...