[Argus] Real Time Flow Monitor

Argus is a fixed-model Real Time Flow Monitor designed to track and report on the status and performance of all network transactions seen in a data network traffic stream. Argus provides a common data format for reporting flow metrics such as connectivity, capacity, demand, loss, delay, and jitte...

PT-2014-4798 · Sonicwall · Sonicwall Network Security Appliance

Name of the Vulnerable Software and Affected Versions: SonicWall Network Security Appliance NSA 2400 Description: The issue is related to a cross-site scripting XSS vulnerability in the Dashboard Backend service, specifically in the stats/dashboard.jsp component. This vulnerability allows remote...

Puppet Enterprise 3.x < 3.1.3 LibYAML Heap-Based Buffer Overflow

According to its self-reported version number, the Puppet Enterprise 3.x install on the remote host is prior to 3.1.3. As a result, it is reportedly affected by an error related to the included LibYAML version, the 'yamlparserscantaguri' function and YAML tag parsing that could allow a heap-based...

[SSLsplit] Transparent and scalable SSL/TLS interception

SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. Connections are transparently intercepted through a network address translation engine and redirected to SSLsplit. SSLsplit terminates SSL/TLS and initiates a new SSL/TLS connection to the original...

Ubuntu 12.04 LTS / 12.10 : gtk+3.0 update (USN-2149-2)

USN-2149-1 fixed a vulnerability in librsvg. This update provides a compatibility fix for GTK+ to work with the librsvg security update. It was discovered that librsvg would load XML external entities by default. If a user were tricked into viewing a specially crafted SVG file, an attacker could...

Fedora 20 : subversion-1.8.8-1.fc20 (2014-3365)

This update includes the latest stable release of Subversion, fixing a security issue CVE-2014-0032 : Subversion's moddavsvn Apache HTTPD server module will crash when it receives an OPTIONS request against the server root and Subversion is configured to handle the server root and SVNListParentPa...

Cisco IPS MainApp SNMP DoS (CSCul49309)

A vulnerability in Cisco IPS Software could allow an unauthenticated, remote attacker to cause the MainApp to hang intermittently due to improper handling of SNMP packets sent to the management interface. Note that, in order to for the remote host to be affected by this issue, SNMP must be enable...

BEWARE of new Facebook Malware Claims, 'Malaysia Plane MH370 Has Been Spotted'

Hackers are very smart on gaining from every opportunity they get and this time the lost Malaysian Airlines flight MH370 gave them a chance to hijack, not the plane, but you all sitting over their operating your Facebook account and having an eye on every news related to the Mysterious Malaysian...

Ubuntu 10.04 LTS : cups vulnerabilities (USN-2144-1)

Florian Weimer discovered that the pdftoopvp filter bundled in the CUPS package incorrectly handled memory. An attacker could possibly use this issue to execute arbitrary code with the privileges of the lp user. CVE-2013-6474, CVE-2013-6475 Florian Weimer discovered that the pdftoopvp filter...

Ubuntu 12.04 LTS / 12.10 / 13.10 : cups-filters vulnerabilities (USN-2143-1)

Florian Weimer discovered that cups-filters incorrectly handled memory in the urftopdf filter. An attacker could possibly use this issue to execute arbitrary code with the privileges of the lp user. This issue only affected Ubuntu 13.10. CVE-2013-6473 Florian Weimer discovered that cups-filters...

Yokogawa CENTUM CS 3000 - 'BKHOdeq.exe' Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Yokogawa CENTUM CS 3000 BKHOdeq.exe Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow in Yokoga...

Fedora 20 : v8-3.14.5.10-6.fc20 (2014-3222)

Common Vulnerabilities and Exposures assigned an identifier CVE-2013-6650 to the following vulnerability : Name: CVE-2013-6650 URL: https://vulners.com/cve/CVE-2013-6650 The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before...

Fedora 19 : kernel-3.13.5-103.fc19 (2014-3448)

This kernel update contains a number of CVE fixes, all users are encouraged to update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

Ubuntu 12.04 LTS : linux-lts-saucy vulnerabilities (USN-2137-1)

An information leak was discovered in the Linux kernel when built with the NetFilter Connection Tracking NFCONNTRACK support for IRC protocol NFNATIRC. A remote attacker could exploit this flaw to obtain potentially sensitive kernel information when communicating over a client- to-client IRC...

Fedora 20 : kernel-3.13.5-202.fc20 (2014-3442)

This kernel update contains a number of CVE fixes, all users are encouraged to update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

Fedora 20 : rubygem-actionpack-4.0.0-2.fc20 (2013-23636)

Includes security patches for : - CVE-2013-6417 - Incomplete fix to CVE-2013-0155 Unsafe Query Generation Risk - CVE-2013-4491 - Reflective XSS Vulnerability in Ruby on Rails - CVE-2013-6415 - XSS Vulnerability in numbertocurrency - CVE-2013-6414 - Denial of Service Vulnerability in Action View -...

CVE-2013-5468

CVE-2013-5468 affects IBM Algo One usage in MetaData Management Tools (UDS 4.7.0–5.0.0) and AlgoWeb components (ACSWeb 4.7.0–4.9.0; AlgoWebApps 5.0.0). The common issue is that login requests are not encrypted, enabling remote attackers to sniff sensitive data on the network. Connected documents ...

Novell ZENworks Configuration Management < 11.3.0.35304 PreBoot Service Directory Traversal

The remote host has a version of Novell ZENworks Configuration Management installed prior to 11 SP3 11.3.0.35304. It is, therefore, affected by a directory traversal vulnerability due to improper validation of an unspecified parameter of the PreBoot Service when reading files. A remote,...

[WirelessKeyView] Recover lost wireless network key

WirelessKeyView recovers all wireless network security keys/passwords WEP/WPA stored in your computer by the 'Wireless Zero Configuration' service of Windows XP or by the 'WLAN AutoConfig' service of Windows Vista, Windows 7, Windows 8, and Windows Server 2008. It allows you to easily save all ke...

GnuTLS certificate verification security vulnerability found

GnuTLS, an open source SSL and TLS implementation used in hundreds of software packages including Red Hat desktop and server products and all Debian and Ubuntu Linux distributions, is the latest crypto package to improperly verify digital certificates as authentic. The vulnerability, discovered a...