Threat Outbreak Alert RuleID11287: Email Messages Distributing Malicious Software on August 27, 2014

Medium Alert ID: 35443 First Published: 2014 August 27 12:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11287 may contain the following files: Name |...

ManageEngine DeviceExpert 5.9 Credential Disclosure

Hi, You can read the usernames and MD5 hashed passwords of all the users in the Device Expert application by sending an unauthenticated request. I am releasing this as a 0 day as ManageEngine have responded that they do not consider this a priority and won't fix it in the near future unless a...

Threat Outbreak Alert RuleID11272: Email Messages Distributing Malicious Software on August 26, 2014

Medium Alert ID: 35421 First Published: 2014 August 26 12:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11272 may contain the following files: Name |...

Threat Outbreak Alert RuleID11228: Email Messages Distributing Malicious Software on August 24, 2014

Medium Alert ID: 35397 First Published: 2014 August 25 14:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11228 may contain the following files: Name |...

Threat Outbreak Alert RuleID11242: Email Messages Distributing Malicious Software on August 25, 2014

Medium Alert ID: 35404 First Published: 2014 August 25 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11242 may contain the following files: Name |...

openSUSE Security Update : libserf / subversion (openSUSE-SU-2014:1059-1)

This subversion and libserf update fixes several security and non security issues : - subversion: guard against md5 hash collisions when finding cached credentials bnc889849 CVE-2014-3528 - subversion: raserf: properly match wildcards in SSL certs. bnc890511 CVE-2014-3522 - libserf: Handle NUL...

Threat Outbreak Alert RuleID11212: Email Messages Distributing Malicious Software on August 22, 2014

Medium Alert ID: 35373 First Published: 2014 August 22 14:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11212 may contain the following files: Name |...

HashCat Introduction: Break That Hash

When the Bitcoin mining craze hit its peak, people felt the tug to join this new community and make some easy money. The Concepts behind Bitcoin mining intrigued me, in particular the new use of graphics processors GPUs. With a moderately expensive video card, you could bring in enough money to p...

Threat Outbreak Alert RuleID11189: Email Messages Distributing Malicious Software on August 20, 2014

Medium Alert ID: 35353 First Published: 2014 August 20 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11189 may contain the following files: Name |...

Pro Chat Rooms 8.2.0 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Pro Chat Rooms v8.2.0 - Multiple Vulnerabilities Google Dork: intitle:"Powered by Pro Chat Rooms" Date: 5 August 2014 Exploit Author: Mike Manzotti @ Dionach Ltd Vendor Homepage: http://prochatrooms.com Software Link:...

SUSE-SU-2015:0709-1 Security update for subversion

Subversion has been updated to fix a security problem: bnc889849: Reveal authentication information through an md5 collision attack on authentication realm CVE-2014-3528 Security Issues: CVE-2014-3528...

Threat Outbreak Alert RuleID11185: Email Messages Distributing Malicious Software on August 19, 2014

Medium Alert ID: 35349 First Published: 2014 August 19 20:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11185 may contain the following files: Name |...

CVE-2014-3528

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm...

CVE-2014-3528

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm...

Authentication flaw

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm...

CVE-2014-3528

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm...

CVE-2014-3528

CVE-2014-3528 affects Apache Subversion: cached credentials are protected by an MD5 hash of the URL and authentication realm. Subversion 1.0.0–1.7.x (before 1.7.17) and 1.8.x (before 1.8.10) store credentials in this manner, which may allow a remote server to obtain credentials via a crafted auth...

CVE-2014-3528

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm...

CVE-2014-3528: Undefined Security Weakness

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm...

Threat Outbreak Alert RuleID11154: Email Messages Distributing Malicious Software on August 18, 2014

Medium Alert ID: 35326 First Published: 2014 August 18 18:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11154 may contain the following files: Name |...