VeriSign demands Power to takedown non-legitimate website

VeriSign demands Power to takedown non-legitimate website VeriSign, which manages the database of all .com internet addresses, wants powers to shut down "non-legitimate" domain names when asked to by law enforcement. VeriSign should be able to shut down a .com or .net domain, and therefore its...

VeriSign demands Power to takedown non-legitimate website

VeriSign demands Power to takedown non-legitimate website VeriSign, which manages the database of all .com internet addresses, wants powers to shut down "non-legitimate" domain names when asked to by law enforcement. VeriSign should be able to shut down a .com or .net domain, and therefore its...

Google Removes .CO.CC Subdomains Over Phishing, Spam Concerns

In a rare and sweeping move, Google has removed all of the sites hosted on .co.cc domains from its search results, saying that because such a large percentage of the sites on that freehosting provider are low-quality or spammy, they decided to de-index all of them. The .co.cc domain is well-known...

Microsoft Host Integration Server 2004-2010 - Remote Denial of Service

source: https://www.securityfocus.com/bid/49997/info Microsoft Host Integration Server is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to become unresponsive or to crash, denying service to legitimate users...

eXPert PDF Batch Creator 7.0.880.0 - Denial of Service

eXPert PDF Batch Creator 7.0.880.0 - Denial of Service source: https://www.securityfocus.com/bid/47040/info eXPert PDF is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause the application to crash, denying service to legitimate users. eXPert PDF 7.0.880.0 is...

eXPert PDF Batch Creator 7.0.880.0 - Denial of Service

source: https://www.securityfocus.com/bid/47040/info eXPert PDF is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause the application to crash, denying service to legitimate users. eXPert PDF 7.0.880.0 is vulnerable; other versions may also be affected...

Lessons From the Rustock Takedown

As a follow-up to the Rustock botnet news, Microsoft have identified themselves as the key instigators of the takedown. This is the second time Microsoft’s legal team has been actively involved in combating the botnet menace – and they obviously learned from their previous attempt at trying to...

Weborf 'get_param_value()' Function HTTP Header Handling Denial Of Service Vulnerability

Weborf is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Versions prior to Weborf 0.12.5 are vulnerable. OpenVAS Vulnerability Test $Id: gbweborf46054.nasl 7015 2017-08-28 11:51:24Z teissa...

Attack Knocks Mail and Guardian Web Site Offline

The Web site of The Mail & Guardian, a leading news outlet in South Africa, was off line on Wednesday after what the paper claims were “sustained attacks” by hackers, reportedly based in Russia. The paper pulled down its Web site, which had begun hosting malicious content and posted a message...

High Profile Education, Government Sites Hacked

The Web sites of some of the nation’s top universities were discovered to be serving up links to bogus online stores offering everything from popular software by Microsoft to student visas and Viagra, according to a report from security firm zScaler. Portions of Websites belonging to Harvard...

Mongoose 2.11 - Content-Length HTTP Header Remote Denial of Service

Mongoose 2.11 - Content-Length HTTP Header Remote Denial of Service source: https://www.securityfocus.com/bid/45602/info Mongoose is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input. Successfully exploiting this issue will allow an attacker to...

Sigma Portal - 'ShowObjectPicture.aspx' Denial of Service

source: https://www.securityfocus.com/bid/45588/info Sigma Portal is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause the server to consume excessive resources, denying service to legitimate users...

Siberia Exploit Kit Offers Service to Evade Anti-Malware Software

Attackers have been using legitimate online services such as VirusTotal and others to check their new pieces of malware against various security suites for some time now, but that’s become less and less effective recently. Now, the creators of some exploit kits are beginning to include less...

Wikileaks, Dodging DDoS, Bounces Back to Amazon

The Web site of Wikileaks was moving quickly to stay out of the way of large scale denial of service attacks on Sunday and Monday, following the release of a trove of sensitive U.S. diplomatic cables. The controversial site, which has spent months trying to find a home secure from government...

Linux Kernel 2.6.x - inotify_init() Memory Leak Local Denial of Service

Linux Kernel 2.6.x - inotifyinit Memory Leak Local Denial of Service / source: https://www.securityfocus.com/bid/45036/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause an out-of-memory condition, denying service to legitimate...

CVE-2010-3170

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL serve...

IBM solidDB Multiple Denial of Service Vulnerabilities

IBM solidDB is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Spamhaus Debuts New Whitelist Service

The Spamhaus Project has debuted a new whitelisting service that is designed to be the inverse of the way that most approved-sender lists work. The Spamhaus Whitelist will exclude by default any IP address or domain that sends marketing or soliciting mail at all and will require domain owners to...

Scareware That Wants You to Uninstall AV

Virus authors have developed a strain of malware that attempts to con users into uninstalling legitimate security packages. Read the full article. The Register...

OraclMySQL 5.1.48 - 'LOAD DATA INFILE' Denial of Service

source: https://www.securityfocus.com/bid/42625/info MySQL is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the database, denying access to legitimate users. This issue affects versions prior to MySQL 5.1.49. NOTE: This issue was previously covered in BID...