DDoS Attack Against GitHub Continues After More Than Four Days

More than four days after it began, the massive DDoS attack on GitHub is still ongoing. The attack has evolved significantly since it started and GitHub officials said they believe that the goal of the operation is to force the site to remove some specific content. In the evening hours of March 2...

Fedora 12 setroubleshootd Local Root Proof Of Concept

setroubleshoot tries to find out which rpm a particular file belongs to when it finds SELinux access violation reports. The idea is probably to have convenient reports for the admin which type enforcement rules have to be relaxed. setroubleshoot runs as root although in its own domain. In util.py...

Design/Logic Flaw

Unspecified vulnerability in MyBB aka MyBulletinBoard before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders."...

CVE-2015-2786

Unspecified vulnerability in MyBB aka MyBulletinBoard before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders."...

CVE-2015-2763

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703...

Design/Logic Flaw

Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."...

CVE-2014-7885

Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager ESM before 6.8c have unknown impact and remote attack vectors...

CVE-2014-7884

Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors...

CVE-2014-7885

Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager ESM before 6.8c have unknown impact and remote attack vectors...

CVE-2014-7884

CVE-2014-7884 affects HP ArcSight Logger prior to 6.0P1. The Nessus entry and Exploit-DB show an Arbitrary File Upload/Code Execution path due to improper sanitization of uploaded file names in the configuration import feature, allowing an authenticated attacker to upload a server-side script (JS...

CVE-2014-7885

HP ArcSight Enterprise Security Manager (ESM) prior to 6.8c is affected by multiple remote vulnerabilities (CVE-2014-7885). The Nessus entry cites XSS due to failure to validate tooltip input and CSRF allowing changes to rules or resources via a crafted link; affected versions include ESM before ...

Code injection

Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admin users...

CVE-2014-9688

Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admin users...

CVE-2014-9688

Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admin users...

OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004)

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security...

Oracle Java SE 8 < Update 41 Multiple Vulnerabilities

Binary data 8748.prm...

Oracle Java SE 7 < Update 77 Multiple Vulnerabilities

Binary data 8749.prm...

Code injection

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do n...

CVE-2015-0301

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do n...