Threat Outbreak Alert: Fake Shipment Tracking Information Email Messages on May 14, 2014

Medium Alert ID: 34223 First Published: 2014 May 14 14:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipment tracking information for the recipient. The text in the email message attempts to convince the recipient ...

bug vulnerability handling mechanism system-bugtracker-bug warning-the black bar safety net

For the company configured a Bug tracking system, 找到BugTracker.NET,read a bit, the translation of which is configuration. After a research experience then put up to share. A friend in need can be the following URL to download http://sourceforge.net/project/showfiles.php?groupid=66812 BugTracker...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Researchers: Accelerometers Perfect for Pervasive Tracking

Minute manufacturing imperfections in popular accelerometers cause that hardware to emit uniquely identifiable data that could give third parties the ability to single out specific mobile devices, regardless of any privacy protections deployed on them. In a paper published by the University of...

Yahoo Drops Support for Do Not Track

Yahoo, one of the first large Web companies to recognize the Do Not Track header from browsers on its properties, has now backtracked and said it will no longer support DNT. Officials said the lack of an industry standard for DNT that’s effective led to the decision. DNT is an option in the major...

Threat Outbreak Alert: Fake Shipment Tracking Information Email Messages on April 30, 2014

Medium Alert ID: 34010 First Published: 2014 April 30 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipment tracking information for the recipient. The text in the email message attempts to convince the recipien...

[SECURITY] Fedora 19 Update: bugzilla-4.2.9-1.fc19

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

kernel: netfilter: nf_conntrack_dccp: incorrect skb_header_pointer API usages

net/netfilter/nfconntrackprotodccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via a DCCP packet that triggers a call to the 1 dccpnew, 2 dccppacket, or 3...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Updated kernel-rt packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

CVE-2012-1366

Cisco IOS before 15.11SY on ASR 1000 devices, when Multicast Listener Discovery MLD tracking is enabled for IPv6, allows remote attackers to cause a denial of service device reload via crafted MLD packets, aka Bug ID CSCtz28544...

Code injection

Cisco IOS before 15.11SY on ASR 1000 devices, when Multicast Listener Discovery MLD tracking is enabled for IPv6, allows remote attackers to cause a denial of service device reload via crafted MLD packets, aka Bug ID CSCtz28544...

CVE-2012-1366

CVE-2012-1366 affects Cisco IOS on ASR 1000 devices prior to 15.1(1)SY, where enabling IPv6 Multicast Listener Discovery (MLD) tracking allows remote attackers to cause a denial of service (device reload) by sending crafted MLD packets (Bug ID CSCtz28544). Connected sources confirm the vulnerabil...

CVE-2013-0634

creationtimestamp| type| source ---|---|--- 2014-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32959 2014-11-13 09:56:43+00:00| seen| MISP/54645d0f-5a88-4160-9416-5694950d210b 2014-11-13 10:03:15+00:00| seen| MISP/546481a0-fc90-4aa4-8508-4a68950d210b 2018-05-29...

UBUNTU-CVE-2014-2665

includes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before 1.21.8, and 1.22.x before 1.22.5 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information ...

Threat Outbreak Alert: Fake Shipment Tracking Information Email Messages on April 18, 2014

Medium Alert ID: 33852 First Published: 2014 April 18 13:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipment tracking information from UPS for the recipient. The text in the email message attempts to convince the...

Ensnare Web Application Attack Detection Utility Released

BOSTON – Two engineers from Netflix this week released to open source a security tool that detects attacks against web applications—and also reacts to those attacks with responses they hope will flummox a hacker to the point that he moves on to his next target. The utility is called Ensnare and i...

Connecting the Dots Between Cookies and Identities

A team of computer science engineers from Princeton have released a paper that explains how an adversary with a passive presence on a network or Internet backbone could track individuals by observing HTTP cookies. The motivation for the project was news in December that the National Security Agen...

CVE-2014-2314

creationtimestamp| type| source ---|---|--- 2014-04-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32725 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/jiracollectortraversal.rb 2025-02-06 03:13:41+00:00...

USN-2158-1: Linux kernel (Raring HWE) vulnerabilities

Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw makes it easier for a local attacker to break cryptographic protections. CVE-2013-4345 Nico Golde and Fabian Yamaguchi reported buffer underflow errors in the implementation of the XFS filesystem...

Ubuntu 12.04 LTS : linux-lts-raring vulnerabilities (USN-2158-1)

Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw makes it easier for a local attacker to break cryptographic protections. CVE-2013-4345 Nico Golde and Fabian Yamaguchi reported buffer underflow errors in the implementation of the XFS filesystem...