When ‘int’ is the new ‘short’

Posted by Mark Brand, Truncator of Integers This is going to be a quick post, just describing a particularly interesting Chrome issue that I found last month; how I found it; and what is interesting about it… I was looking through some Chrome networking code; and I noticed an interesting API desi...

Debian DSA-3284-1 : qemu - security update

Several vulnerabilities were discovered in qemu, a fast processor emulator. - CVE-2015-3209 Matt Tait of Google's Project Zero security team discovered a flaw in the way QEMU's AMD PCnet Ethernet emulation handles multi-TMD packets with a length above 4096 bytes. A privileged guest user in a gues...

Debian DSA-3285-1 : qemu-kvm - security update

Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution on x86 hardware. - CVE-2015-3209 Matt Tait of Google's Project Zero security team discovered a flaw in the way QEMU's AMD PCnet Ethernet emulation handles multi-TMD packets with a length above 4096 bytes. A...

DSA-3285-1 qemu-kvm - security update

Bulletin has no description...

[SECURITY] [DSA 3285-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3285-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 13, 2015 https://www.debian.org/security/faq -...

CVE-2015-0774

Cross-site scripting XSS vulnerability in Cisco Application and Content Networking System ACNS 5.59 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu70650...

CVE-2015-0774

The CVE-2015-0774 entry covers a Cross-site Scripting (XSS) vulnerability in Cisco’s Application and Content Networking System (ACNS) version 5.5(9), tracked as Bug CSCuu70650. The issue allows an unauthenticated, remote attacker to inject arbitrary script or HTML via a crafted URL. Public detail...

Cisco Application and Content Networking System Cross-Site Scripting Vulnerability

The Cisco Application and Content Networking System is an application and content networking system. A cross-site scripting vulnerability exists in Cisco Application and Content Networking System, which could be exploited by remote attackers to inject malicious script or HTML code that, when view...

Ubuntu: Security Advisory (USN-2615-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2619-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Python for Security Professionals: Free IT Security Training

Python is an excellent programming language that has rapidly become popular among Hackers, Reverse engineers, software testers, Forensic analyst and Penetration testers. Python is a simple object-oriented and minimalistic language that is easy to learn for novice programmers as well as experience...

CRUCMS Crucial Networking - SQL Injection Vulnerability

Document Title: =============== CRUCMS Crucial Networking - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1497 Release Date: ============= 2015-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Cisco ONS 15454 System Software Denial of Service Vulnerability

The Cisco ONS 15454 is a multi-service provisioning platform that includes sound, video, and data solutions. The Cisco ONS 15454 System Software has a security vulnerability that allows a remote attacker to exhaust the tNetTask CPU and cause the card to reset through a large IP or Ethernet data...

CVE-2015-0756

Cisco Wireless LAN Controller WLC devices with software 7.41.1 allow remote attackers to cause a denial of service wireless-networking outage via crafted TCP traffic on the local network, aka Bug ID CSCug67104...

[SECURITY] Fedora 20 Update: openslp-1.2.1-22.fc20

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerability (USN-2619-1)

A flaw was discovered in the Linux kernel's IPv4 networking when using TCP fast open to initiate a connection. An unprivileged local user could exploit this flaw to cause a denial of service system crash. Note that Tenable Network Security has extracted the preceding description block directly fr...

Ubuntu 14.04 LTS : Linux kernel vulnerability (USN-2620-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2620-1 advisory. A flaw was discovered in the Linux kernel's IPv4 networking when using TCP fast open to initiate a connection. An unprivileged local user could exploit this flaw ...

USN-2620-1: Linux kernel vulnerability

A flaw was discovered in the Linux kernel's IPv4 networking when using TCP fast open to initiate a connection. An unprivileged local user could exploit this flaw to cause a denial of service system crash...

USN-2620-1 linux vulnerability

A flaw was discovered in the Linux kernel's IPv4 networking when using TCP fast open to initiate a connection. An unprivileged local user could exploit this flaw to cause a denial of service system crash...

USN-2619-1: Linux kernel (Trusty HWE) vulnerability

A flaw was discovered in the Linux kernel's IPv4 networking when using TCP fast open to initiate a connection. An unprivileged local user could exploit this flaw to cause a denial of service system crash...