Important: Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.7 security, bug fix and enhancement update

Red Hat OpenShift Enterprise release 2.2.7 is now available with updates to packages that fix several bugs and introduce feature enhancements. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Microsoft Chooses Ubuntu Linux for their Cloud-based Azure HDInsight Big Data Solution

Earlier this month, Microsoft surprised us all with the announcement that they built a Linux kernel-based operating system, Azure Cloud Switch ACS, for developing software products for Network Devices. Now, Microsoft just announced that they have selected Ubuntu as the operating system for their...

360MarvelTeam virtualization vulnerabilities the second bomb: CVE-2 0 1 5-5 2 7 9 vulnerability analysis-vulnerability warning-the black bar safety net

Cloud computing has now become a by most Internet companies to accept the service mode, it provides customized hardware resources, applications, and services. As the implementation of the cloud computing concept the most important technical cornerstone, the virtualization system provides hardware...

USN-2745-1 qemu, qemu-kvm vulnerabilities

Lian Yihan discovered that QEMU incorrectly handled certain payload messages in the VNC display driver. A malicious guest could use this issue to cause the QEMU process to hang, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2015-5239 Qinghao...

Microsoft has Built its own Linux Operating System

Sit Tight on your seats, because you're gonna get a Shock. Microsoft has developed an Operating System powered by LINUX. Close your mouth first. It’s True! Microsoft has built its own Linux-based operating system called Azure Cloud Switch ACS and believe me, under Satya Nadella, Microsoft has...

QEMU 'vnc.c' Denial of Service Vulnerability

QEMU is an open source emulator software. An integer overflow vulnerability exists in QEMU's VNC display driver, located in vncclientread and protocolclientmsg, which can be exploited by a client user to cause the VNC driver to loop indefinitely, causing the QEMU process to crash, via a larger...

KVM virtualization new Vulnerability, CVE-2 0 1 5-6 8 1 5 Technical Analysis-vulnerability warning-the black bar safety net

0x00 Preface Cloud computing service has now touched multiple industries, whether it is cloud storage, cloud music and other life can be seen everywhere in business, even banking and Finance, payment information and other services and the cloud are closely related. As a cloud service based, the...

Cisco Unified Computing System Director Arbitrary File Write Vulnerability

The Cisco Unified Computing System simplifies IT management and improves agility by integrating unified computing, networking, storage access and virtualization into a single system. A security vulnerability in the Cisco Unified Computing System Director JSP file allows remote attackers to exploi...

Apple to build Fuel Cell Battery that Could Power iPhones and Macbooks for Weeks

Nothing could be scarier than that little battery icon in our smart hits the red. All our focus shifts towards searching the nearest charging outlet – and it happens all too often. Yes, the short battery life is the worst thing about our smartphones. It forces us to always carry chargers and...

Moderate: Red Hat Security Advisory: openshift security update

Updated openshift packages that fix one security issue are now available for Red Hat OpenShift Enterprise 3.0. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

The vulnerability of the Cisco UCS Central operating system, allowing a hacker to read arbitrary files

The vulnerability of the Cisco UCS Central operating system’s web framework exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially crafted HTTP request...

Web Encryption Protocol That Even Quantum Computers Can't Crack

Sometimes, instead of black and white we tend to look out, how a grey would look? Yes, today we are going to discuss the ‘entangling’ or ‘superpositioning’ which is a power packed functionality of quantum computers. And simultaneously, how can they pose a threat when fully launched in the world...

Important: Red Hat Security Advisory: node.js security update

Updated node.js packages that fix one security issue are now available for Red Hat OpenShift Enterprise 2.1. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Debian DSA-3325-1 : apache2 - security update

Several vulnerabilities have been found in the Apache HTTPD server. - CVE-2015-3183 An HTTP request smuggling attack was possible due to a bug in parsing of chunked requests. A malicious client could force the server to misinterpret the request length, allowing cache poisoning or credential...

PT-2015-1570

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS version 2.23b Description The issue allows local users to gain privileges for executing arbitrary CLI commands by leveraging access to the subordinate fabric interconnect. It exists due to the failure to...

CVE-2015-4279: Improper Neutralization of Special Elements used in an OS Command

The Manager component in Cisco Unified Computing System UCS 2.23b on B Blade Server devices allows local users to gain privileges for executing arbitrary CLI commands by leveraging access to the subordinate fabric interconnect, aka Bug ID CSCut32778...

Cisco Unified Computing System C Integrated Management Controller Security Bypass Vulnerability

Cisco Unified Computing System UCS C server is a Unified Computing System UCS C-series server from Cisco USA.Integrated Management Controller IMC is a set of management tools used in which it supports HTTP, SSH access, and so on, and can perform operations such as powering on, powering off, and...

CVE-2015-4259

Cisco UCS C-Series Servers IMC exposes a default SSL certificate, enabling MITM attacks by an attacker with knowledge of the private key. Affected product: Integrated Management Controller on UCS C servers running 1.5(3) or 1.6(0.16). Root cause: use of a default certificate that bypasses cryptog...

PT-2015-6487

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS C servers software versions 1.53 and 1.60.16 Description The issue concerns a default SSL certificate in the Integrated Management Controller, which could allow man-in-the-middle attackers to bypass...

CVE-2015-4259: Undefined Security Weakness

The Integrated Management Controller on Cisco Unified Computing System UCS C servers with software 1.53 and 1.60.16 has a default SSL certificate, which makes it easier for man-in-the-middle attackers to bypass cryptographic protection mechanisms by leveraging knowledge of a private key, aka Bug...