Debian Security Advisory DSA 3132-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian OpenVAS Vulnerability Test $Id: deb3132.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3132-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2015 Greenbone Networks GmbH...

Gitrob Combs Github Repositories for Secret Company Data

Free online code repositories such as GitHub provide a valuable collaboration service for enterprise developers. But it’s also a trove of potentially sensitive company and project information that’s likely to warrant attention from hackers. An application security specialist from Berlin has...

Search all Github Repositories for an Organization

gumbler is a script I wrote to search through git commits and introduced in the blog post "Searching Through Git Commits". Recently I wanted to run Gumbler across all repositories for an organization, the steps are discussed below. First, we need to grab a list of repositories for the ORG. This c...

POODLE vulnerability comeback, the impact of the TLS secure transmission protocols-vulnerability warning-the black bar safety net

! The Google security team in October found that a high-risk SSL vulnerability POODLE, now it a comeback, this time it is SSL upgrade version-the TLS Protocol. POODLE（Padding Oracle On Downgraded Legacy Encryption）vulnerabilities that had affected the most widely used Encryption Standard-SSL v3. ...

Threat Outbreak Alert RuleID12220: Email Messages Distributing Malicious Software on November 3, 2014

Medium Alert ID: 36301 First Published: 2014 November 3 15:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12220 may contain the following files: Name |...

Google Launches User-Friendly 'Inbox' App, Alternative To Gmail

Google is offering its users a completely new and better experience of its mailing service. And in an effort to do this, the company has launched a new email service, an alternative to Gmail, called "Inbox" on Wednesday that aims to make email more useful and preview next-generation capabilities...

Threat Outbreak Alert RuleID11970: Email Messages Distributing Malicious Software on October 14, 2014

Medium Alert ID: 36079 First Published: 2014 October 14 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11970 may contain the following files: Name |...

CVE-2014-6905

The H2O Human Harmony Organization aka com.netpia.ha.theh2o application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The H2O Human Harmony Organization aka com.netpia.ha.theh2o application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6905

The CVE-2014-6905 entry concerns the H2O Human Harmony Organization Android app (package com.netpia.ha.theh2o), version 1.6.5, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra...

CVE-2014-6905

The H2O Human Harmony Organization aka com.netpia.ha.theh2o application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Salesforce Warns Customers of Dyreza Banker Trojan Attacks

Salesforce.com is warning its customers that the Dyreza banker Trojan is now believed to be targeting some of the company’s users. The Trojan, which has the ability to bypass SSL, typically goes after customers of major banks, but seems to be expanding its reach. Dyreza is relatively new among th...

HackBack - A DIY Guide for those without the patience to wait for whistleblowers

HackBack - A DIY Guide for those without the patience to wait for whistleblowers. Papers exploit for Multiple platform | | | | | | | | | | | | || |/ |/ | |/ / | \ / |/ | |/ / | | | | | | | | | | | | || || ||,|||\ |/ ,|||\ A DIY Guide for those without the patience to wait for whistleblowers --...

Buffer overflow attacks the beginners manual-vulnerability warning-the black bar safety net

! A buffer overflow occurs in the user input related to the buffer zone, in the General case, this has turned into a modern computer and network aspects of the biggest security risks. This is because in the program on the basis it is prone to this problem, but it is for the unaware or unable to g...

Member ID The Fish Index PHP SQL Injection Vulnerability

No description provided by source. , | ,---. , . |---. ,---. ,---. ,---. ,---. ,---. , . , | --- | | | | | |---' | | | |---' | | | | ---' ---| ---' ---' ---' ---' ------ ---' V Member ID The Fish Index PHP SQL Injection Vulnerability --== Author ==-- + Author : v4lc0m87 + Contact :...

Simple DNS Plus <= 5.0/4.1 - Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl Simple DNS Plus 5.0/4.1 remote Denial of Service exploit usage: sdns-dos.pl dns server dns source port num of packets Exploit written by Exodus. http://www.blackhat.org.il use IO::Socket; if@ARGV 3 printsdns-dos.pl dns server dns source port num o...

Microsoft Organization Chart 2 - Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31059/info Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation. Remote attackers can exploit this issue by enticing victims into opening a maliciously crafte...

AlstraSoft AskMe Pro 2.1 (forum_answer.php?que_id) SQL Injection Vulnerability

No description provided by source. ================================================================== Exploit Title: AlstraSoft AskMe Pro SQL Injection Vulnerability Date: 12/09/2010 Author: Amine92 Email: [email protected] Software Link: http://www.alstrasoft.com/askme.htm Version: All Versio...

HappyMall E-Commerce Software 4.3/4.4 Normal_HTML.CGI Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7529/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the normalhtml.cgi script. This could lead to attacks against system...

FuzeZip 1.0.0.131625 - SEH Buffer Overflow

No description provided by source. !/usr/bin/python Exploit Title: SEH BUFFER OVERFLOW IN FUZEZIP V.1.0 Date: 16.Apr.2013 Vulnerability reported Exploit Author: Josep Pi Rodriguez, Pedro Guillen Nunez , Miguel Angel de Castro Simon Organization: RealPentesting Vendor Homepage: http://fuzezip.com/...