Crouching Yeti APT Campaign Stretches Back Four Years

A new analysis of a long-term APT campaign targeting manufacturers, industrial, pharmaceutical, construction and IT companies in several countries has uncovered fresh details of the attack, including identification of nearly 3,000 victims and the unmasking of the command-and-control infrastructur...

Debian Security Advisory DSA 2983-1 (drupal7 - security update)

Multiple security issues have been discovered in the Drupal content management system, ranging from denial of service to cross-site scripting. More information can be found at https://www.drupal.org/SA-CORE-2014-003 . OpenVAS Vulnerability Test $Id: deb2983.nasl 8972 2018-02-28 07:02:10Z cfischer...

Fedora Update for apt-cacher-ng FEDORA-2014-7751

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: apt-cacher-ng-0.7.26-2.fc20

A caching proxy. Specialized for package files from Linux distributors, primarily for Debian and Debian based distributions...

Fedora 20 : apt-cacher-ng-0.7.26-2.fc20 (2014-7751)

update to 0.7.26 fixed XSS vulnerability rhbz 1111808 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Miniduke APT Campaigh Returns with New Targets, Hacking Tools

The Miniduke advanced persistent threat APT campaign uncovered by researchers at Kaspersky Lab and CrySys Lab in February 2013 is back after a year-long hiatus in which attacks abated almost entirely. While the initial Miniduke operations primarily targeted government organizations in Europe, thi...

APT-WEBSHOP-SYSTEM modules.php SQL Injection Vulnerability

No description provided by source. =============================================== APT-WEBSHOP-SYSTEM modules.php SQL injection =============================================== / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|/ //...

Ubuntu: Security Advisory (USN-2246-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : APT vulnerability (USN-2246-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2246-1 advisory. Jakub Wilk discovered that APT did not correctly validate signatures when downloading source packages. If a remote attacker were able to perform a...

USN-2246-1 apt vulnerability

Jakub Wilk discovered that APT did not correctly validate signatures when downloading source packages. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered source packages...

CVE-2014-0478

APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature...

CVE-2014-0478

APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature...

DEBIAN-CVE-2014-0478

APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature...

Design/Logic Flaw

APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature...

CVE-2014-0478

APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature...

CVE-2014-0478

CVE-2014-0478 affects APT prior to 1.0.4 and arises from improper validation of source packages, enabling MITM attackers to install Trojan horse packages by removing the Release signature. Connected advisories (Ubuntu USN-2246-1, Debian/DLA-0005-1, OSV references) corroborate the issue across Deb...

CVE-2014-0478

APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature...

Asprox Malware Borrowing Stealth from APT Campaigns

Cybercriminals and advanced attackers are freely borrowing from one another’s repertoires to great success. The latest example involves spammers firing off up to a half-million email messages during limited campaign segments without triggering any detection alarms. Security company FireEye said t...

phpwind 9.0后台执行任意php代码

简要描述： 诶呀我这种小透明总算是能够发一个看起来比较高大上的漏洞了´･ω･ --这次漏洞的利用需要APT或者社工才能做到｡・ω´･-- 所以请各位使用pw系统的站长要看好自己的权限咯 :з」∠ 话说我打这么多颜文字会不会看起来很萌 σ'ω'σ 哈哈哈哈哈就这样吧,高考完了闲得慌来一发漏洞 肉肉肉我爱你（开玩笑的） 详细说明： 漏洞的利用需要“门户设计”权限，也就是在线编辑网站模板所需要的权限。 测试的phpwind版本为 v9.0 20130702 本来直接告诉了开发组结果被说“你不给他权限不就好了嘛”，遂发到乌云来。 由于是0day所以估计涉及了大量版本（？） 正片：...

Debian Security Advisory DSA 2960-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb2960.nasl 6724 2017-07-14...