CVE-2013-6448

The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allows remote attackers to bypass the WebRemote annotation restriction and obtain information about arbitrary classes and methods on the server classpath via...

CVE-2013-6448: Undefined Security Weakness

The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allows remote attackers to bypass the WebRemote annotation restriction and obtain information about arbitrary classes and methods on the server classpath via...

23-Year-old Russian Hacker confessed to be original author of BlackPOS Malware

In the previous reports of Cyber Intelligence firm 'IntelCrawler' named Sergey Tarasov, a 17-year-old teenager behind the nickname "ree4", as the developer of BlackPOS malware. BlackPOS also known as "reedum" or 'Kaptoxa' is an effective crimeware kit, used in the massive heist of possibly 110...

CentOS Update for java CESA-2014:0027 centos5

Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2014:0027 centos5 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

BlackPOS Malware used in TARGET Data Breach developed by 17-Year Old Russian Hacker

The Holiday data breach at TARGET appeared to be part of a broad and highly sophisticated international hacking campaign against multiple retailers, involving the heist of possibly 110 million Credit-Debit cards, and personal information. Target confirmed last weekend that a malicious software wa...

CentOS 6 : java-1.7.0-openjdk (CESA-2014:0026)

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0375...

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0418, and CVE-2014-0424...

Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that...

PT-2014-1253

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote...

PT-2014-1226

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote...

PT-2014-1225

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Oracle JDK affected versions not specified Oracle JRE affected versions not specified Description The issue is related to a component...

PT-2014-1231

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u51 and 8 Java SE Embedded version 7u51 lcms versions prior to 2.6-r1 Java Runtime Environment affected versions not specified Jrockit affected versions not specified Java Development Kit affected versions not specifie...

PT-2014-1260

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote...

PT-2014-1273

Name of the Vulnerable Software and Affected Versions Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Oracle JDK affected versions not specified Oracle JRE affected versions not specified Description The issue allows a remote attacker ...

PT-2014-1252

Name of the Vulnerable Software and Affected Versions Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Oracle Java SE affected versions not specified Description The issue is related to a vulnerability in the Java Development Kit, Java...

RHEL 5 : java-1.7.0-openjdk (RHSA-2014:0027)

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

PT-2014-1264

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u65 through 7u45 Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Description The issue affects confidentiality, integrity, and availability. It is related t...

Blackhole Exploit Kit Successor Years Away

It should shock no one that a viable successor to the Blackhole exploit kit has yet to emerge in the criminal underground. It’s been less than three months since the arrest of its alleged creator Paunch sent cybercriminals reliant on the toolkit scrambling for a replacement. And like any profitab...