119 matches found
This Unbreakable Encryption Could Save the Internet
The Awareness to encrypt your private data, chat conversations as well as communication is booming like never before that soon the world will mark some day as the International Encryption Day. This may or may not be possible in future, but Toshiba is all set to create a next level of encryption...
The SS7 network to save significant vulnerability that everyone can monitor mobile phones-vulnerability warning-the black bar safety net
Recently, German researchers found that the mobile security vulnerabilities these vulnerabilities enable hackers, spies and criminals take advantage of, you can large-scale wiretapping of private telephone and steal a mobile phone short message, even if the mobile phone network using the current...
Edward Snowden Effect on Privacy Attitudes
Serious concessions have been made about privacy post-Snowden, in particular about how personal information is processed and consumed online. Results from a survey conducted by the Pew Research Center of Washington, D.C., show that the Snowden leaks have raised consumers’ consciousness about not...
Scientific Linux Security Update : openssl on SL5.x i386/x86_64 (20141016) (POODLE)
This update adds support for the TLS Fallback Signaling Cipher Suite Value TLSFALLBACKSCSV, which can be used to prevent protocol downgrade attacks against applications which re-connect using a lower SSL/TLS protocol version when the initial connection indicating the highest supported protocol...
SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
On October 14, 2014, a vulnerability was publicly announced in the Secure Sockets Layer version 3 SSLv3 protocol when using a block cipher in Cipher Block Chaining CBC mode. SSLv3 is a cryptographic protocol designed to provide communication security, which has been superseded by Transport Layer...
Khan Academy: Weak Ciphers Enabled
Vulnerability Details:- I detected that weak ciphers are enabled during secure communication SSL. You should allow only strong ciphers on your web server to protect secure communication with your visitors. Impact:- Attackers might decrypt SSL traffic between your server and your visitors. Remedy:...
Unbreakable Encryption inspired by Human Biology
When we talk about security, only one thing cames to our mind – ENCRYPTION. Encryption of our online messages, encryption of our emails, encryption of our voice call, encryption of our every personal data and communication that we have to keep away from cybercriminals and, if I am not wrong, also...
Loadbalancer.org Enterprise VA 7.5.2 - Static SSH Key
----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Loadbalancer.org Enterprise VA 7.5.2 and below ------------------------- Affected vendors: ------------------------- Loadbalancer.org http://www.loadbalancer.org/...
GnuTLS Bug Exposes Shortcomings in TLS Test Suites
Code audits are often ugly tasks and can sometimes find ugly things. Case in point: the GnuTLS goto bug. Chief architect and Red Hat engineer Nikos Mavrogiannopoulos initiated a code audit of the open source crypto library that eventually turned up last week’s critical bug. The bad code has been...
Pentagon to Obama: icanhasbilliondollars plz?
Capitol Hill may be awash in tough talk on cuts to domestic programs, but that’s not stopping the Pentagon from seeking an additional billion dollars in funding for cyber security, according to a report from Nextgov.com. The Department of Defense is requesting $3.2 billion, almost $1 billion more...
CVE-2008-1094 - Barracuda Span Firewall SQL Injection Vulnerability
CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable to various SQL Injection attacks...
Barracuda Spam Firewall v3.5.11.020, Model 600 SQL Injection Vuln
Exploit for hardware platform in category remote exploits ================================================================= Barracuda Spam Firewall v3.5.11.020, Model 600 SQL Injection Vuln ================================================================= CVE Number: CVE-2008-1094 Vulnerability:...
Barracuda Spam Firewall v3.5.11.020 Model 600 SQL Injection Vuln
No description provided by source. CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable ...
CVE-2007-3165
Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers...
Microsoft PowerPoint does not properly handle malformed shapes
Overview Microsoft PowerPoint contains a vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft PowerPoint contains a vulnerability that could be exploited when PowerPoint opens a specially crafted document. Accordin...
Microsoft MSN Messenger Information Disclosure Vulnerability
Description Microsoft MSN Messenger is prone to an information disclosure vulnerability. When a malformed file transfer request is initiated by a remote user, they may be able to view the contents of files on the remote system. Technologies Affected Microsoft MSN Messenger Service 6.0 Microsoft M...
CVE-2004-1766
The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing...
aim.2.0.ip.address.txt
Exploit in the newest AIM 2.0 IU Uprising [email protected] Tue, 8 Jun 1999 18:39:50 PDT In the newest version of AIM AOL Instant Messenger there is a way to transfer files. When you are transferring the file, you can open a DOS prompt and type: netstat -a -n By doing this you obviously can g...
