706 matches found
nodejs-node-uuid: insecure entropy source - Math.random()
It was found that NodeJS node-uuid used Math.random to create a GUID Globally Unique Identifier which does not provide enough entropy on some platforms it only provides 32 bits which can result in collisions of GUIDs. An attacker could use this to guess GUID values and leverage further attacks...
OSEC-2016-02 Memory disclosure in mirage-net-xen
Background MirageOS is a library operating system using cooperative multitasking, which can be executed as a guest of the Xen hypervisor. Virtual devices, such as a network device, share memory between MirageOS and the hypervisor. MirageOS allocates and grants the hypervisor access to a ringbuffe...
The FBI against the judges command: declined to use the Tor browser vulnerability code-vulnerability warning-the black bar safety net
! Last month, the FBI was ordered disclosure used to attack the dark web child pornography website single visitors single full version malicious code. To make this decision of judge Robert J. Bryan, he expressed his understanding of the FBI what exactly is how to caught the accused is a very fair...
Verizon Allows Opt Out of UIDH Mobile Supercookie
Verizon Wireless has made a change that now allows customers to opt out of the ad-targeting program that relies on the so-called supercookie identifier that was inserted into Web requests users send. The use of the identifier, known as a UIDH, drew the ire of privacy advocates and users when it w...
Seattle Lab Software Emurl 2.0 Email Account Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1203/info Emurl software creates a unique identifier for each user, based on their account name. This identifier is encoded using the ascii value of each character in the account name and augmented by its position. By usi...
Threat Outbreak Alert: Fake Tax Payment Failure Notification Email Messages on November 11, 2013
Medium Alert ID: 31722 First Published: 2013 November 12 14:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax payment failure notification for the recipient. The text in the email message attempts to convince the...
Java Exploit Linked to Red October Espionage Malware Campaign
Red October, the espionage campaign uncovered by Kaspersky Lab this week after attackers spent five years actively spying on diplomats, scientists, and governments worldwide, is using a Java exploit to infect its victims, bringing the exploit count to four in this campaign. Seculert, an Israeli...
RedHat Update for squirrelmail RHSA-2013:0126-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Low: Red Hat Security Advisory: squirrelmail security and bug fix update
An updated squirrelmail package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Threat Outbreak Alert: Fake UPS Payment Document Attachment Email Messages on January 21, 2014
Low Alert ID: 25171 First Published: 2012 February 13 15:22 GMT Last Updated: 2014 January 22 15:06 GMT Version: 53 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment document from the United Parcel Service UPS for the recipient...
kernel: validate size of EFI GUID partition entries
The isgptvalid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface EFI GUID Partition Table GPT entry, which allows physically proximate attackers to cause a denial of service heap-based buffer overflow and OOPS or obtain...
Ethernet Card Manufacturer Detection
Each ethernet MAC address starts with a 24-bit Organizationally Unique Identifier OUI. These OUIs are registered by IEEE. TRUSTED...
DEBIAN-CVE-2005-3487
Multiple buffer overflows in Scorched 3D 39.1 bf and earlier allow remote attackers to execute arbitrary code via various 1 GLConsole::addLine, 2 ServerCommon::sendString, 3 ServerCommon::serverLog functions, 4 a long command that is not properly handled in ComsMessageHandler.cpp when generating ...
Seattle Lab Software Emurl 2.0 - Email Account Access
Seattle Lab Software Emurl 2.0 - Email Account Access source: https://www.securityfocus.com/bid/1203/info Emurl software creates a unique identifier for each user, based on their account name. This identifier is encoded using the ascii value of each character in the account name and augmented by...
Seattle Lab Software Emurl 2.0 - Email Account Access
source: https://www.securityfocus.com/bid/1203/info Emurl software creates a unique identifier for each user, based on their account name. This identifier is encoded using the ascii value of each character in the account name and augmented by its position. By using a specific URL along with a...
MS:0B1BFD74-A059-41C3-90E9-EADD04FCBE4F
...
MS:256B317C-F222-40C4-920F-BD7426C8F231
...