Hash Kracker v2.5 - All-in-one Hash Password Recovery Software

Hash Kracker is the free all-in-one tool to recover the hash password for multiple hash types. Currently it supports password recovery from following popular Hash types MD5 SHA1 SHA256 SHA384 SHA512 It uses dictionary based cracking method which makes the cracking operation simple and easier...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on April 22, 2014

Medium Alert ID: 33885 First Published: 2014 April 22 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notification for the recipient. The text in the email message attempts to convince the...

Parallels Plesk Panel 12.x Key Disclosure

While auditing the source code for Parallels Plesk Panel 12.x on Linux I noticed the following feature that leads to leakage of the '/etc/psa/private/secretkey'-file in md5 format to non-authenticated users. Parallels responded that the 16byte 'secretkey' should provide sufficient entropy for thi...

Threat Outbreak Alert: Email Messages with Malicious Attachment on April 21, 2014

Medium Alert ID: 33882 First Published: 2014 April 21 19:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment for the recipient. The email message attempts to convince the recipient to open the attachment for details...

Routers TCP 32764 Backdoor Vulnerability Secretly Re-Activated Again

At the beginning of this year, we reported about the secret backdoor ‘TCP 32764’ discovered in several routers including, Linksys, Netgear, Cisco and Diamond that allowed an attacker to send commands to the vulnerable routers at TCP port 32764 from a command-line shell without being authenticated...

Sercomm TCP32674 - Backdoor Reactivation

Sercomm TCP32674 - Backdoor Reactivation / PoC to reactivate Sercomm TCP/32674 backdoor See http://www.synacktiv.com/ressources/TCP32764backdooragain.pdf Eloi Vanderbeken - Synacktiv THIS SOFTWARE IS PROVIDED BY SYNACKTIV ''AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED...

WordPress 3.8.2 patch analysis HMAC timing attack-vulnerability warning-the black bar safety net

author: [email protected] 0x00 background On github over and over to see for a long time, the official version of the diff only in php where changes to a location: | 1 2 | - if $hmac != $hash + if hashhmac 'md5', $hmac, $key !== hashhmac 'md5', $hash, $key ---|--- WP developers just...

Threat Outbreak Alert: Fake Package Shipping Information Email Messages on April 10, 2014

Medium Alert ID: 33739 First Published: 2014 April 10 13:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain shipping information for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Financial Documents Email Messages on April 9, 2014

Medium Alert ID: 33737 First Published: 2014 April 10 13:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claims to contain financial documents email messages for the recipient. The text in the email message attempt...

Threat Outbreak Alert: Email Messages with Malicious Files on April 7, 2014

Medium Alert ID: 33694 First Published: 2014 April 8 12:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a file for the recipient. The text in the email message attempts to convince the recipient to follow a link and...

[security bulletin] HPSBHF02981 rev.1 - HP Integrated Lights-Out 2, 3, and 4 (iLO2, iLO3, iLO4), IPMI 2.0 RCMP+ Authentication Remote Password Hash Vulnerability (RAKP)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04197764 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04197764 Version: 1 HPSBHF02981 rev....

Threat Outbreak Alert: Fake Scanned Image Notification Email Messages on June 21, 2014

Medium Alert ID: 33629 First Published: 2014 April 3 15:24 GMT Last Updated: 2014 June 23 14:46 GMT Version: 22 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned image for the recipient. The text in the email message attempts t...

Threat Outbreak Alert: Fake Scanned Document Notification Email Messages on April 2, 2014

Medium Alert ID: 33620 First Published: 2014 April 2 15:30 GMT Last Updated: 2014 April 4 14:02 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document for the recipient. The text in the email message attempts...

Threat Outbreak Alert: Fake Document Delivery Email Messages on April 1, 2014

Medium Alert ID: 33616 First Published: 2014 April 2 14:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Fax Message Notification Email Messages on April 1, 2014

Medium Alert ID: 33609 First Published: 2014 April 1 20:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax message notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Email Messages with Malicious Attachments on April 1, 2014

Medium Alert ID: 33596 First Published: 2014 April 1 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...

Threat Outbreak Alert: Fake Tax Information Request Email Messages on March 31, 2014

Medium Alert ID: 33579 First Published: 2014 March 31 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a request for tax information for the recipient. The text in the email message attempts to convince the recipien...

PhonerLite 2.14 Digest Information Leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-firefox-24.4.0esr-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...