MySQL < 5.0.23 / 5.1.12 Denial of Service

The version of MySQL installed on the remote host is older than 5.0.23 or 5.1.12. As such, it reportedly is affected by an off-by-one buffer overflow. A local attacker could use this flaw to crash the service. Note that this vulnerability is disputed as the attacker needs extensive permissions to...

Code injection

One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a denial of service login disruption or spoof votes or comments by selecting a conflicting e-mail address...

RedHat Update for kernel RHSA-2011:1386-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 5 : kernel (CESA-2011:1386)

Updated kernel packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

Hotmail, MSN, Office 365, live.com sites down (now up)

Hotmail , MSN , Office 365 , live.com sites down now up A number of Microsoft online services, including Hotmail, MSN, Office 365, and seemingly most if not all of .live.com addresses are currently "experiencing an outage". MSN and Office 365 have already tweeted about it: The downtime, which...

PT-2011-1065 · Suse +2 · Ext4Dev-Kmp-Trace +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 ext4dev-kmp-trace affected versions not specified Description: The issue affects the IPv6 implementation in the Linux kernel, making it easier for remote attackers to disrupt networking by predicting Fragmen...

CVE-2011-2699

The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service disrupted networking by predicting these values and sending crafted packets...

HKEx - Hong Kong stock exchange Hacked

HKEx - Hong Kong stock exchange Hacked Trading in Hong Kong was disrupted on Wednesday by a hacking incident on the Hong Kong Exchange website. "Our current assessment that this is a result of a malicious attack by outside hacking," Charlies Li, chief executive of Hong Kong Exchanges & Clearing,...

HKEx - Hong Kong stock exchange Hacked

HKEx - Hong Kong stock exchange Hacked Trading in Hong Kong was disrupted on Wednesday by a hacking incident on the Hong Kong Exchange website. "Our current assessment that this is a result of a malicious attack by outside hacking ," Charlies Li, chief executive of Hong Kong Exchanges & Clearing,...

vBulletin 4.1.3pl3 / 4.1.4pl3 / 4.1.5pl1 Cross Site Scripting

Advisory Information Title: vBulletin Cross Site Scripting Vulnerability Date published: 02-08-2011 Vendors contacted: vBulletin team Vulnerability Information Class: XSS flaw Vulnerable page: Admin Login Page admincp Remotely Exploitable: Yes Locally Exploitable: No Vulnerability Description...

Lulzsec Releases Final Message to the friends around the globe

Lulzsec Releases Final Message to the friends around the globe Anonymous Tweet Video message as "Lulzsec Last Message". In 10minutes the Video get 200 Likes and 7000 Views. Every message of Anonymous/ Lulzsec is spreading like Fire. The Video Message is here : Lulzsec Message is : Friends around...

Lulzsec Releases Final Message to the friends around the globe

Lulzsec Releases Final Message to the friends around the globe Anonymous Tweet Video message as "Lulzsec Last Message ". In 10minutes the Video get 200 Likes and 7000 Views. Every message of Anonymous/ Lulzsec is spreading like Fire. The Video Message is here : Lulzsec Message is : Friends around...

LulzSec shuts down Brazilian government Websites

LulzSec shuts down Brazilian government Websites LulzSec has targeted another major government site & to bring down several major targets in Brazil, including the Websites of the Brazilian government and the President's office. "Tango down ," LulzSec trumpeted on its Twitter feed – a phrase used ...

Debian Security Advisory DSA 2197-1 (quagga)

The remote host is missing an update to quagga announced via advisory DSA 2197-1. OpenVAS Vulnerability Test $Id: deb21971.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2197-1 quagga Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Trust the ‘Cloud’ (just make sure you have it examined first)

In the wake of Amazons Web Service disruption over the past few days we think it is important to look at the case a little closer...

Amazon Web Service Down, No Timeline for Remedy

Amazon Web Service’s AWS Elastic Compute Cloud EC2, based in Northern Virginia, went offline early this morning, taking with it a number of popular sites including, news aggregator Reddit and question and answer site and TechCrunch darling, Quora.The Web hosting firm’s Relational Database Service...

Microsoft, FireEye Take Down Notorious Rustock Botnet

Being a botnet operator has traditionally been a fairly reliable and easy way to make money. But it’s starting to become a slightly dicier occupation these days, as evidenced by the news of the takedown of the venerable and virulent Rustock botnet by researchers at Microsoft and FireEye. Rustock...

New banking trojan capable of hijacking the SSL connections !

Security researchers from Symantec warn of a new banking trojan capable of hijacking the SSL connections between browsers and online banking sites in a way that is hard to spot. Variants of this malware, which Symantec detects as Trojan.Tatanarg, have been in circulation since last October, but i...

PT-2011-1082 · Suse +2 · Kernel-Kdumppae +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.0 kernel-kdumppae affected versions not specified Description: The issue allows local users to cause a denial of service, resulting in a system hang, via a specific system call. Additionally, multiple...

PT-2011-1076 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38.4 Description: The issue is related to multiple integer overflows in the next pidmap function in kernel/pid.c, which can cause a denial of service system crash via crafted system calls, specifically 1...