Anonymous Hackers dumps 600k Emails from most popular Israeli web portal

As part of Operation Israel OpIsrael Anonymous Hackers once again strike on Israeli infrastructure by dumping the 600,000 emails and passwords from one of the most popular Israeli web portal 'Walla', which is know for providing news, search and e-mail system, among other things. Anonymous Activis...

Anonymous Hackers dumps 600k Emails from most popular Israeli web portal

As part of Operation Israel OpIsrael Anonymous Hackers once again strike on Israeli infrastructure by dumping the 600,000 emails and passwords from one of the most popular Israeli web portal 'Walla', which is know for providing news, search and e-mail system, among other things. Anonymous Activis...

cURL - Buffer Overflow (PoC)

cURL - Buffer Overflow PoC cURL buffer overflow Wed 06 February 2013 Volema found remotely exploitable buffer overflow vulnerability in libcurl POP3, SMTP protocol handlers which lead to code execution RCE. When negotiating SASL DIGEST-MD5 authentication, the function Curlsaslcreatedigestmd5messa...

cURL buffer overflow

Buffer overflow in SASL DIGEST-MD5 implementation...

cURL - Buffer Overflow (PoC)

cURL buffer overflow Wed 06 February 2013 Volema found remotely exploitable buffer overflow vulnerability in libcurl POP3, SMTP protocol handlers which lead to code execution RCE. When negotiating SASL DIGEST-MD5 authentication, the function Curlsaslcreatedigestmd5message uses the data provided...

cURL Buffer Overflow

cURL buffer overflow Wed 06 February 2013 Volema found remotely exploitable buffer overflow vulnerability in libcurl POP3, SMTP protocol handlers which lead to code execution RCE. When negotiating SASL DIGEST-MD5 authentication, the function Curlsaslcreatedigestmd5message uses the data provided...

CVE-2013-0249

Stack-based buffer overflow in the Curlsaslcreatedigestmd5message function in lib/curlsasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string...

cURL Buffer Overflow Vulnerability

A remotely exploitable buffer overflow vulnerability was discovered in the libcurl POP3 and SMTP protocol handlers. Proper exploitation can allow for arbitrary code execution. cURL buffer overflow Wed 06 February 2013 Volema found remotely exploitable buffer overflow vulnerability in libcurl POP3...

curl

New curl packages are available for Slackware 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/curl-7.29.0-i486-1slack14.0.txz: Upgraded. When negotiating SASL DIGEST-MD5 authentication, the function Curlsaslcreatedigestmd5messag...

Mozilla Januarys (important)

The Mozilla January 8th 2013 security release contains updates: Mozilla Firefox was updated to version 18.0. Mozilla Seamonkey was updated to version 2.15. Mozilla Thunderbird was updated to version 17.0.2. Mozilla XULRunner was updated to version 17.0.2. MFSA...

CentOS 5 : freeradius2 (CESA-2013:0134)

Updated freeradius2 packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

freeradius2 security update

CentOS Errata and Security Advisory CESA-2013:0134 Updated freeradius2 packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring...

Low: Red Hat Security Advisory: freeradius2 security and bug fix update

Updated freeradius2 packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

John the Ripper Linux Password Cracker

This module uses John the Ripper to identify weak passwords that have been acquired from unshadowed passwd files from Unix systems. The module will only crack MD5, BSDi and DES implementations by default. Set Crypt to true to also try to crack Blowfish and SHA256/512. Warning: This is much slower...

Threat Outbreak Alert: Fake Personal Picture Sharing Email Messages on September 4, 2013

Low Alert ID: 27717 First Published: 2013 January 2 15:05 GMT Last Updated: 2013 September 5 14:46 GMT Version: 2 Summary Cisco Security has detected significant activity related to Italian language spam email messages that claim to contain personal pictures for the recipient. The text in the ema...

Threat Outbreak Alert: Fake Product Order Email Messages on March 22, 2015.

Low Alert ID: 27634 First Published: 2012 December 13 15:21 GMT Last Updated: 2015 March 23 12:45 GMT Version: 52 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quote attachment for the recipient. The text in the email...

Snare Agent Linux Password Disclosure / CSRF Vulnerabilities

Snare for Linux ships with a web interface that can be used for viewing log data and configuring the agent. In the web interface at /remote, a user is able to set a password for remote configuration of the agent. The rendered page contains the field "RemotePassword" with its input type set to...

Snare for Linux Password Disclosure

Snare for Linux Password Disclosure I. BACKGROUND ---------------------- Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating system. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and storage. II...

Discuz! X系列对md5与明文登录区分不明

简要描述： 在Discuz！平台上，如果密码够安全的话，经过md5md5newpw.salt 加密之后是很难破解出密码的，但是你又没有想过，如果别人有一个还有你的密码的md5加密的数据库的时候，可以直接用你的32位md5加密之后的密文直接登录，那岂不是很不安全？ 详细说明： 在登录时，除了你的明文密码之外，32位的md5也可以登录，当你拥有一个还有他/她密码的32位md5加密后的密码不也是能进去了么？ 具体的代码部分没有看，但是只有X系列会出现这样的错误，应该是Ucenter出的错了吧！ 漏洞证明： 前言： 在Discuz！平台上，如果密码够安全的话，经过md5md5$newpw.$sa...

X-Ray 2.0 - VirusTotal frontent version for Suspicious Files Auto Submit

Raymond announce X-Ray 2.0, a program which is frontend for VirusTotal multi scanner. X-Ray will provide users with automatic submission of files that you think are suspicious to 35 Agnitum, Antiy Labs, Avast, AVG, Avira, Bitdefender, QuickHeal, ClamAV, Comodo, Dr.Web, Emsisoft, ESET, F-Prot,...