CVE-2016-10728

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...

DEBIAN-CVE-2016-10728

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...

CVE-2016-10728

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...

CVE-2016-10728

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...

CVE-2016-10728

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...

CVE-2016-10728

The CVE-2016-10728 issue affects Suricata versions before 3.1.2. When an ICMPv4 error packet is the first packet on a flow in the to_client direction, the rule grouping lookup logic is confused, causing the toclient inspection to proceed under the wrong rule group and potentially miss detections....

Cross site scripting

On D-Link DIR-620 devices with a certain customized by ISP variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, a reflected Cross-Site Scripting XSS attack is possible as a result of missed filtration for special characters in the "Search" field and incorrect processing of t...

CVE-2018-6212

On D-Link DIR-620 devices with a certain customized by ISP variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, a reflected Cross-Site Scripting XSS attack is possible as a result of missed filtration for special characters in the "Search" field and incorrect processing of t...

High Availability Failovers Due to Missed HA HeartBeats of NetScaler VPX on VMware ESX Hypervisor

NetScaler VPX on VMWare hypervisor High Availability failsover due to missed HA heartbeats. Note : This article only pertains to NetScaler VPX on VMWare hypervisor. Background Root cause of the HA failovers is missing heartbeats due to VPX scheduling issues on the VMware host. The NetScaler’s...

Threat Outbreak Alert RuleID14120: Email Messages Distributing Malicious Software on March 20, 2015

Medium Alert ID: 37967 First Published: 2015 March 20 12:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14120 may contain the following files: Name | Si...

iOS7 system aeration lock screen vulnerability:two unit operation you can control the most recent application-vulnerability warning-the black bar safety net

Recently users have discovered a new iOS 7 system vulnerabilities, this vulnerability can not help but creepy! Exploit this vulnerability to bypass the password input interface, in don't know password to open your most recently used software. And this process in just 5 seconds! After testing, thi...

Threat Outbreak Alert: Fake Package Delivery Failure Notice Email Messages on April 29, 2014

Medium Alert ID: 33992 First Published: 2014 April 29 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed package delivery notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Missed Shipping Delivery Notice Email Messages on January 27, 2014

Medium Alert ID: 32579 First Published: 2014 January 27 18:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a UPS shipping notification for the recipient. The text in the email message attempts to convince the recipien...

NSA admits to collect 200 Million text messages per day under Project DISHFIRE

After the exposure of various surveillance programs, including PRISM, XKeyscore, MUSCULAR, DROPOUTJEEP in recent revelation, NSA has come up as the only ‘Government that Actually Listen’. Another day and here comes another revelation - According to the The Guardian, National Security Agency NSA h...

Threat Outbreak Alert: Fake Missed Delivery Notification Email Messages on October 17, 2013

Medium Alert ID: 31326 First Published: 2013 October 17 18:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed delivery attempt notification for the recipient. The text in the email message attempts to convince t...

Critical flaw in Viber app allows full access to Smartphones

More than 50 millions of Smartphone users worldwide are facing a risk posed by a critical flaw in Viber app. The security company Bkav announced that it has found a way to gain full access to Android phones using the popular Viber messaging app. Unlike the Samsung lockscreen issue we reported on...

Simple Web Server 2.2-rc2 - ASLR Bypass

Simple Web Server 2.2-rc2 - ASLR Bypass use IO::Socket; Exploit Title: SWS 2.2-rc2 - Remote code execution Egghunting + ASLR bypass Date: 28/8/2012 Special Regards to Mr.pr0n ,Corelan team , immunity u guys are first !!! based on a POC by MR. Pr0n Author: pole Tested on Windows 7 32bit NOTE : If...

Fedora Update for maniadrive FEDORA-2012-7586

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

China CERT: We Missed Report On SCADA Hole

China’s Computer Emergency Response Team CERT admitted that it missed a September e-mail message from a researcher at NSS Labs that pointed out a critical vulnerability in a commonly used SCADA Supervisory Control And Data Acquisition software package. The lapse resulted in a gap of almost four...

openSUSE Security Update : pidgin-otr (pidgin-otr-2096)

This update contains the missed pidgin-otr dependend package of the last pidgin update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pidgin-otr-2096. The text description of this plugin is ...