1270 matches found
JavaScript Payload Encoding
Certain JavaScript obfuscation schemes can be used to circumvent security software. These methods could allow attackers to execute arbitrary code on a target machine...
CVE-2013-5561
The Safe Search enforcement feature in Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software does not properly perform filtering, which allows remote attackers to bypass intended policy restrictions via unspecified vectors, aka Bug ID CSCui94622...
CVE-2013-5561
Cisco ASA CX Context-Aware Security Safe Search enforcement contains a bypass vulnerability (Bug CSCui94622) that could allow an unauthenticated, remote attacker to bypass security policy via crafted HTTP requests. No software update is available per Cisco advisory Cisco-SA-20131104-CVE-2013-5561...
CVE-2013-5561: Improper Input Validation
The Safe Search enforcement feature in Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software does not properly perform filtering, which allows remote attackers to bypass intended policy restrictions via unspecified vectors, aka Bug ID CSCui94622...
CVE-2013-5789 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-8-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9...
Questions Linger About New Linux 'Hand of Thief' Trojan
It looks like cybercriminals will soon be able to add yet another Trojan to their hacking repertoire, the Hand of Thief banking malware that targets Linux machines. Currently being sold on the Russian black market, Hand of Thief is fetching $2,000 USD €1,500 EUR but could be poised to run a cool...
KINS Banking Trojan For Sale in Underground Forum
It seems the cybercrime underground is pining for a new breed of banking Trojan. With heavyweights such as Citadel no longer generally available for purchase, rumblings on forums for months have indicated that a new project would be welcomed and financed. Since February, researchers at RSA’s...
njRAT Attacks Spike Against Middle East High-Value Targets
Government agencies, telecom and energy organizations in the Middle East are being targeted by espionage malware known as njRAT. The remote access Trojan is thorough in its data-stealing capabilities. Beyond dropping a keylogger, variants are capable of accessing a computer’s camera, stealing...
DLL hijacking vulnerability analysis-vulnerability warning-the black bar safety net
Hack in the hands of the new weapons Eric 2 0 1 2 early release of China 2 0 1 1 in the second half of the personal Internet Security report, containing such a data: 2 0 1 1 in the second half of ten hot points of the Trojans, where 5 is the use of DLL hijacking vulnerability to system damage. DL...
CVE-2013-1203: Improper Input Validation
Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service device reload via crafted TCP packets that appear to have been forwarded by a Cisco Adaptive Security Appliances ASA device, aka Bug ID CSCue88386...
kde4libs information leakage
User's credentials are incorrectly requested under some conditions...
CVE-2013-2421 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-8-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9...
Mozilla NSS library TLS timing attacks
"Lucky Thirteen" attacks are possible...
PiceBOT Crimeware Kit targeting Latin America Banks
A new Cyber Crimeware kit arrived in Hacking scenes called 'PiceBOT' just like other Latin American botnets such as vOlk Mexico & S.A.P.Z Peru and cost just $140 in underground market for Cyber criminals. Like other amazing exploit kits, the main purpose is the distribution of malware that steals...
Active Defense class software generic implementation vulnerability-a vulnerability warning-the black bar safety net
Active Defense software in the realization of the presence of a Common Vulnerability, malware can take to bypass security checks to perform malicious acts The main anti-block system some of the key operation in these monitoring points do parameter checking. Because the parameters often come from...
Unsafe is the user rather than the system-then talk about QQ input method vulnerability-vulnerability warning-the black bar safety net
In Win8 Remote Desktop vulnerabilities: the use of QQ Pinyin pure version achieve provided the right of this article, The authors found through a"Remote Desktop input method loophole". right, so as to achieve control Winows 8 The remote machine method. Here is what principle? When we see the Remo...
CVE-2012-5070 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-8-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9...
DNSChanger Malware : Thousands May Lose Net Access On July 9th July
Thousands May Lose Net Access On July 9th July The warnings about the Internet problem have been splashed across Facebook and Google. Internet service providers have sent notices, and the FBI set up a special website. Thousands of Canadians could be among the hundreds of thousands of people aroun...
IBM Rational AppScan 8.x/7.x 多个安全漏洞
CVE ID:...
CVE-2012-1435
The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a...