Suspicious HTML Containing Overly Long Text (CVE-2013-2551)

HTML files may include a text tag containing an overly long and suspicious strings. This behavior may indicate an exploitation attempt...

CVE-2012-2249

Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service assertion failure and daemon exit via a renegotiation attempt that occurs after the initiation of the V3 link protocol...

CVE-2012-2249: Undefined Security Weakness

Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service assertion failure and daemon exit via a renegotiation attempt that occurs after the initiation of the V3 link protocol...

Threat Outbreak Alert: Fake Bank Account Security Information Email Messages on December 11, 2013

Medium Alert ID: 32137 First Published: 2013 December 13 05:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain online banking safety information for the recipient. The text in the email message attempts t...

Suspicious Javascript Variable Names (CVE-2013-2551)

Javascript may contain overly large amount of abnormal variable names. This behavior may indicate an exploitation attempt...

[Beleth] Multi-threaded SSH Password Auditor

Dictionary based SSH cracker Usage: ./beleth OPTIONS -c payload Execute payload on remote server once logged in -h Display this help -l threads Limit threads to given number. Default: 4 -p port Specify remote port -t target Attempt connections to this server -u user Attempt connection using this...

CVE-2013-4434

Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames...

Threat Outbreak Alert: Fake Faxed Document Notification Email Messages on October 21, 2013

Medium Alert ID: 31386 First Published: 2013 October 21 13:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax notification for the recipient. The text in the email message attempts to convince the recipient to open...

Amazon Linux AMI : php (ALAS-2012-95)

Integer overflow in the pharparsetarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow...

Want to be the Part of History? Just be a part of E-HACK

E-HACK is an Information Security Workshop, organized by infySEC. The workshop aims at creating awareness about INFORMATION SECURITY by showing in what all ways information or data can be stolen. Meddle in cyber-warfare, battle with our machine master mind who will throw challenges on web...

Threat Outbreak Alert: Fake Order Invoice Notification Email Messages on April 12, 2014

Low Alert ID: 29458 First Published: 2013 May 28 14:58 GMT Last Updated: 2014 April 14 13:22 GMT Version: 6 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an order invoice notification for the recipient. The text in t...

PT-2013-2956

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager CUCM affected versions not specified Description The issue is related to the improper limitation of authentication attempt rates, allowing remote attackers to cause an application slowdown via a series of...

WordPress HTTP Brute Force Login Attempt

A remote attacker can exploit this vulnerability by using brute force login attempt. Successful exploitation would allow an attacker to gain unauthorized access to the server...

Telephony Denial-of-Service Attacks Prompt Federal Attention

The call-center equivalent of network-based denial-of-service attacks, known as telephony denial-of-service TDoS, have targeted emergency services among other industries, enough to garner attention from the Department of Homeland Security, Federal Bureau of Investigation, Federal Communications...

Evernote hacked, reset your password Now !

Cloud note-taking service Evernote has been hacked and now you have to reset your password imminently. According to a post on the official Evernote blog, an unidentified attacker compromise the servers and extracted usernames, email addresses, and passwords. "Evernote's Operations & Security team...

Ecava IntegraXor Server Login Attempt

Binary data 6698.prm...

Low: Red Hat Security Advisory: OpenIPMI security, bug fix, and enhancement update

Updated OpenIPMI packages that fix one security issue, multiple bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which give...

Threat Outbreak Alert: Fake Personal Video Sharing Email Messages on October 9, 2013

Low Alert ID: 27713 First Published: 2013 January 2 15:05 GMT Last Updated: 2013 October 9 18:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a video attachment for the recipient. The text in the email message attempt...

CVE-2012-3428

The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does not use the credentials supplied in a getConnection function call, which allows remote attackers to obtain access to an arbitrary datasource...

MySQL Remote Preauth User Enumeration Zeroday

Exploit for windows platform in category remote exploits MySQL User Account Enumeration Utility When an attacker authenticates using an incorrect password with the old authentication mechanism from mysql 4.x and below to a mysql 5.x server the mysql server will respond with a different message th...