NOKIA Siemens FlexiISN 3.1 - Multiple Auth Bypass Vulnerabilities

No description provided by source. NOKIA Siemens FlexiISN GGSN Multiple Authentication bypass Vulnerability: NOKIA Siemens FlexiISN Remote: Yes Local: No Class: Input Validation Error Critical: Moderately critical OS : FlexiISN GGSN FISN 3.1 URL 1 for bypassing authentication on AAA Configuration...

New CMS Local File Inclusion

No description provided by source. Exploit Title: New CMS Local File Inclusio Date: 24 March 2010 Author: Xash Software Link: http://vaniarupeni.altervista.org/index.php?lng=it&mod=download&pg=download&c=5&download=1219238459 Version: = 1.12 ================================================ \ / / ...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 4 security fixes in this release, including: 369525 High CVE-2014-3154: Use-after-free in filesystem api. Credit to Collin Payne. 369539 High CVE-2014-3155: Out-if-bounds read in SPDY. Credit to James March, Daniel Sommermann and Alan Frindell of Facebook. 369621...

CA ERwin Web Portal 9.5 Multiple Directory Traversals

CA ERwin Web Portal version 9.5 with a build date before March 20, 2014 was detected on the remote host. This version contains multiple directory traversal vulnerabilities that an attacker could use to access sensitive information, or possibly execute arbitrary code. %NASLMINLEVEL 70300 C Tenable...

Threat Outbreak Alert: Fake Multimedia Email Messages on March 25, 2014

Medium Alert ID: 33497 First Published: 2014 March 25 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a multimedia message for the recipient. The text in the email message attempts to convince the recipient to open...

CVE-2014-1761

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attacker...

Immunity Debugger Stack Overflow Vulnerability – PoC

Title : Immunity Debugger – Crash POC Name: Immunity Debugger v1.85 SEH Chain Stack Overflow Discoverer: Veysel HATAŞ email protected Vendor: Immunity Inc Systems Affected: Windows Risk: Low Status: Not Fixed Discovered: 05 January 2014 Reported: 06 January 2014 Published: 20 March 2014...

Threat Outbreak Alert: Fake Online Purchase Information Email Messages on March 21, 2014

Medium Alert ID: 33455 First Published: 2014 March 21 14:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain order details for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Email Messages with Malicious Attachments on March 18, 2014

Medium Alert ID: 33402 First Published: 2014 March 19 15:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with blank message body and document attached for the recipient. The email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake MoneyGram Notification Email Messages on March 18, 2014

Medium Alert ID: 33400 First Published: 2014 March 19 15:41 GMT Version: 1 Summary Cisco Security has detected significant activity related Italian-language to spam email messages that claim to contain a MoneyGram notification for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on March 17, 2014

Medium Alert ID: 33361 First Published: 2014 March 17 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank deposit notification for the recipient. The text in the email message attempts to...

Fedora Update for kernel FEDORA-2014-3448

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2014-3448 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

The March 2014 Security Updates

This month we release five bulletins to address 23 unique CVEs in Microsoft Windows, Internet Explorer and Silverlight. If you need to prioritize, the update for Internet Explorer addresses the issue first described in Security Advisory 2934088, so it should be at the top of your list. While that...

MS14-015: Vulnerabilities in Windows kernel mode driver could allow elevation of privilege: March 11, 2014

None None...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 7, 2014

Medium Alert ID: 33241 First Published: 2014 March 7 20:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to French-language spam email messages that claim to contain a document for the recipient. The email message attempts to convince the recipient to open the...

Advance Notification Service for the March 2014 Security Bulletin Release

Today we provide advance notification for the release of five bulletins for March 2014, two rated Critical and thee rated Important in severity. These updates address issues in Microsoft Windows, Internet Explorer and Silverlight. The update provided in MS14-012 fully addresses the issue first...

Threat Outbreak Alert: Fake Price Adjustment Notification Email Messages on March 3, 2014

Medium Alert ID: 33157 First Published: 2014 March 3 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a price change notice from the Bank of Italy for the recipient. The text in the email message...

Solaris 10 (sparc) : 124581-11 (deprecated)

commcli 7.0-11.00: core patch. Date this patch was last updated by Sun : Mar/12/15 This plugin has been deprecated and either replaced with individual 124581 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

[Avivore] The Twitter-searching Data Miner

Avivore is a Python-based tool that searches Twitter for keywords and then parses any tweets that are found. When parsing, it looks for the following sort of data: Phone numbers in NPA-NXX format ex: 604-555-1212 IPv4 addresses 127.0.0.1 Blackberry PINs ABCDEF12 It presently uses a SQLite backend...

Threat Outbreak Alert: Fake Product Catalog Email Messages on March 26, 2014

Medium Alert ID: 32054 First Published: 2013 December 6 19:01 GMT Last Updated: 2014 March 27 12:56 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product catalogue for the recipient. The text in the email message...