Sercomm TCP32674 - Backdoor Reactivation

Sercomm TCP32674 - Backdoor Reactivation / PoC to reactivate Sercomm TCP/32674 backdoor See http://www.synacktiv.com/ressources/TCP32764backdooragain.pdf Eloi Vanderbeken - Synacktiv THIS SOFTWARE IS PROVIDED BY SYNACKTIV ''AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED...

WordPress 3.8.2 patch analysis HMAC timing attack-vulnerability warning-the black bar safety net

author: [email protected] 0x00 background On github over and over to see for a long time, the official version of the diff only in php where changes to a location: | 1 2 | - if $hmac != $hash + if hashhmac 'md5', $hmac, $key !== hashhmac 'md5', $hash, $key ---|--- WP developers just...

Threat Outbreak Alert: Fake Package Shipping Information Email Messages on April 10, 2014

Medium Alert ID: 33739 First Published: 2014 April 10 13:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipping information for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Financial Documents Email Messages on April 9, 2014

Medium Alert ID: 33737 First Published: 2014 April 10 13:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claims to contain financial documents email messages for the recipient. The text in the email message attempt...

Threat Outbreak Alert: Email Messages with Malicious Files on April 7, 2014

Medium Alert ID: 33694 First Published: 2014 April 8 12:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a file for the recipient. The text in the email message attempts to convince the recipient to follow a link and...

[security bulletin] HPSBHF02981 rev.1 - HP Integrated Lights-Out 2, 3, and 4 (iLO2, iLO3, iLO4), IPMI 2.0 RCMP+ Authentication Remote Password Hash Vulnerability (RAKP)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04197764 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04197764 Version: 1 HPSBHF02981 rev....

Threat Outbreak Alert: Fake Scanned Image Notification Email Messages on June 21, 2014

Medium Alert ID: 33629 First Published: 2014 April 3 15:24 GMT Last Updated: 2014 June 23 14:46 GMT Version: 22 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned image for the recipient. The text in the email message attempts t...

Threat Outbreak Alert: Fake Scanned Document Notification Email Messages on April 2, 2014

Medium Alert ID: 33620 First Published: 2014 April 2 15:30 GMT Last Updated: 2014 April 4 14:02 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document for the recipient. The text in the email message attempts...

Threat Outbreak Alert: Fake Document Delivery Email Messages on April 1, 2014

Medium Alert ID: 33616 First Published: 2014 April 2 14:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Fax Message Notification Email Messages on April 1, 2014

Medium Alert ID: 33609 First Published: 2014 April 1 20:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax message notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Email Messages with Malicious Attachments on April 1, 2014

Medium Alert ID: 33596 First Published: 2014 April 1 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...

Threat Outbreak Alert: Fake Tax Information Request Email Messages on March 31, 2014

Medium Alert ID: 33579 First Published: 2014 March 31 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a request for tax information for the recipient. The text in the email message attempts to convince the recipien...

PhonerLite 2.14 Digest Information Leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-firefox-24.4.0esr-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 27, 2014

Medium Alert ID: 33544 First Published: 2014 March 27 19:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment for the recipient. The email message attempts to persuade the recipient to open the attachment to review th...

MS14-010 CVE-2014-0293 Technical Details and Code(I changed the web permanently)

Origin: Visit http://technet.microsoft.com/en-us/security/bulletin/ms14-010 Check "Acknowledgments" for "CVE-2014-0293". It says "Dieyu" and links to my website http://dieyu.org/ Technical Details: showModalDialog to keep script running, HTTP redirecting to target domain. Then script will run in...

Threat Outbreak Alert: Fake Email Messages with Malicious Attachments on March 24, 2014

Medium Alert ID: 33492 First Published: 2014 March 25 13:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: RuleID9280KVR Email Messages Distributing Malicious Software on August 23, 2016

Medium Alert ID: 33485 First Published: 2014 March 24 20:43 GMT Last Updated: 2016 August 29 14:13 GMT Version: 27 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an invoice for the recipient. The text in the email...

Threat Outbreak Alert: Fake Payment Information Email Messages on March 21, 2014

Medium Alert ID: 33456 First Published: 2014 March 21 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince the recipient to open...