London Police Arrest Five Anonymous Hacker !

Month after allegedly assaulting various websites to defend Wikileaks London police may have caught members of "hacktivism" Anonymous group. Five alleged members were arrested in London today for Anonymous violation of the Computer Misuse Act. The men are aged 15 to 26 and face up to 10 years in...

An Open Letter From ANONYMOUS HACKERS to the UK Government

An Open Letter From ANONYMOUS HACKERS to the UK Government Dear UK government, We are Anonymous. It has come to our attention that you deemed it necessary to arrest five of our fellow anons for their participation in the DDoS attacks against PayPal, Mastercard, and others, that have been carried...

Thai Netizen Network calls for review of cybercrime laws !

The Thai Netizen Network has issued a statement calling for a review of Thai cybercrime laws in light of curbs on free speech and has issued a book for netizens to help them safeguard their privacy and circumvent censorship at the same time. Supinya Klangnarong, co-ordinator of the Thai Netizen...

Pluggable CAPTCHA

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-21359. panel CAPTCHA should be pluggable in JIRA CAPTCHA|http://en.wikipedia.org/wiki/CAPTCHA is supposed to stop spam and other automated...

httpd: mod_proxy_ajp remote temporary DoS

The approxyajprequest function in modproxyajp.c in modproxyajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service backend server outage via a crafted request,...

OpenJDK: Signed applet remote misuse possibility (6782871)

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing...

OpenJDK: Signed applet remote misuse possibility (6782871)

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing...

Some more details on IE STYLE zero-day

Here are a few more details on researching the IE STYLE zero-day vulnerability. Microsoft Security Advisory 977981 describes the vulnerability as follows: "The vulnerability exists as an invalid pointer reference of Internet Explorer. It is possible under certain conditions for a CSS/Style object...

RedHat Security Advisory RHSA-2009:1485

The remote host is missing updates announced in advisory RHSA-2009:1485. PostgreSQL is an advanced object-relational database management system DBMS. It was discovered that the upstream patch for CVE-2007-6600 included in the Red Hat Security Advisory RHSA-2008:0039 did not include protection...

rh security update

CentOS Errata and Security Advisory CESA-2009:1485 Updated postgresql packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relation...

Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relational database management system DBMS. It was discover...

Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relational database management system DBMS. It was...

CVE-2009-3474

OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remote attackers to use a certificate for both signing and encryption when it is designated for just...

Vulnerability in core server (CVE-2009-3230)

The fix for issue CVE-2007-6600 below failed to include protection against misuse of RESET SESSION AUTHORIZATION...

DEBIAN-CVE-2009-2632

Buffer overflow in the SIEVE script component sieve/script.c, as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to...

OpenJDK: Signed applet remote misuse possibility (6782871)

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing...

OpenJDK: Signed applet remote misuse possibility (6782871)

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing...

Linux Kernel 'atm module' Local Denial of Service

net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service kernel infinite loop by making two calls to svclisten for the same socket, and then reading a /proc/net/atm/vc file, related to corruption of the vcc table...

Debian DSA-1701-1 : openssl, openssl097 - interpretation conflict

It was discovered that OpenSSL does not properly verify DSA signatures on X.509 certificates due to an API misuse, potentially leading to the acceptance of incorrect X.509 certificates as genuine CVE-2008-5077 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Debian Security Advisory DSA 1701-1 (openssl, openssl097)

The remote host is missing an update to openssl, openssl097 announced via advisory DSA 1701-1. OpenVAS Vulnerability Test $Id: deb17011.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1701-1 openssl, openssl097 Authors: Thomas Reinke Copyright: Copyright c...