548 matches found
Siemens WinCC Exploitable Crashes
Overview ICS-CERT Advisory ICSA-11-175-02P was originally released to the US-CERT Portal on June 24, 2011. This web page release was delayed to allow users sufficient time to download and install the update. ICS-CERT has received a report from independent security researchers Billy Rios and Terry...
Who Needs a Botnet when you have a 4 Gbps DDoS Cannon?
In recent months the DDoS world has shifted from complex small scale Botnet attacks to much larger network based DDoS attacks, perpetrated largely by hijacked web servers. How many of these hijacked servers are out there remains to be seen. However, Incapsula recently got a very good idea of just...
NSA Director Alexander: US Building Cyberattack Teams
More rhetoric is coming out of Washington regarding the use of malware as an auxiliary weapon to bombs and bullets. National Security Agency leader Gen. Keith Alexander told a House Armed Services Committee yesterday that his new Cyber Command will be ready to retaliate should the United States...
TPM Chip in Windows 8 Lays Foundation for Widespread Enhancements to Hardware-Based Security
Today’s release of the Microsoft Windows 8 operating system brings embedded hardware-level security to the forefront. Microsoft, going forward, will require the Trusted Platform Module TPM chip on Windows PCs, phones and tablets, moving security checks to the platoform’s lowest level. TPM isn’t...
[SECURITY] Fedora 15 Update: net6-1.3.14-1.fc15
net6 is a library which eases the development of network-based applications as it provides a TCP protocol abstraction for C++. It is portable to both the Windows and Unix-like platforms...
[SECURITY] Fedora 14 Update: net6-1.3.14-1.fc14
net6 is a library which eases the development of network-based applications as it provides a TCP protocol abstraction for C++. It is portable to both the Windows and Unix-like platforms...
Fedora Update for net6 FEDORA-2011-15326
Check for the Version of net6 OpenVAS Vulnerability Test Fedora Update for net6 FEDORA-2011-15326 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
ASPR #2011-02-11-2: Remote Binary Planting in Adobe Flash Player
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2011-02-11-2 ------------------------------------------------------------------------- ASPR 2011-02-11-2: Remote Binary Planting in Adobe Flash Player...
Microsoft to Patch 8 Vulnerabilities in Windows, Office
Microsoft has announced plans to ship two security bulletins next week to fix a total of eight vulnerabilities affecting Windows and Office products. Both bulletins are rated “important” because of the risk compromising the confidentiality, integrity or availability of user data. Microsoft is...
LANDesk Management Gateway 4.x - Multiple Vulnerabilities
LANDesk Management Gateway 4.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/38119/info LANDesk Management Gateway is prone to a cross-site request-forgery vulnerability and a cross-site scripting vulnerability. An attacker can exploit the cross-site request forgery issue t...
LANDesk Management Gateway 4.x - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/38119/info LANDesk Management Gateway is prone to a cross-site request-forgery vulnerability and a cross-site scripting vulnerability. An attacker can exploit the cross-site request forgery issue to alter the settings on affected devices. This may lead to...
Mandriva Update for dbus MDVA-2008:111 (dbus)
Check for the Version of dbus OpenVAS Vulnerability Test Mandriva Update for dbus MDVA-2008:111 dbus Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Mandriva Update for dbus MDVA-2008:111 (dbus)
Check for the Version of dbus OpenVAS Vulnerability Test Mandriva Update for dbus MDVA-2008:111 dbus Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Cisco 871 Integrated Services Router - Cross-Site Request Forgery (1)
Cisco 871 Integrated Services Router - Cross-Site Request Forgery 1 source: https://www.securityfocus.com/bid/31218/info The Cisco 871 Integrated Services Router is prone to a cross-site request-forgery vulnerability. Successful exploits can run arbitrary commands on affected devices. This may le...
Cisco 871 Integrated Services Router - Cross-Site Request Forgery (1)
source: https://www.securityfocus.com/bid/31218/info The Cisco 871 Integrated Services Router is prone to a cross-site request-forgery vulnerability. Successful exploits can run arbitrary commands on affected devices. This may lead to further network-based attacks. The 871 Integrated Services...
Cisco 871 Integrated Services Router - Cross-Site Request Forgery (2)
Cisco 871 Integrated Services Router - Cross-Site Request Forgery 2 source: https://www.securityfocus.com/bid/31218/info The Cisco 871 Integrated Services Router is prone to a cross-site request-forgery vulnerability. Successful exploits can run arbitrary commands on affected devices. This may le...
Cisco 871 Integrated Services Router - Cross-Site Request Forgery (2)
source: https://www.securityfocus.com/bid/31218/info The Cisco 871 Integrated Services Router is prone to a cross-site request-forgery vulnerability. Successful exploits can run arbitrary commands on affected devices. This may lead to further network-based attacks. The 871 Integrated Services...
amsn_dos.txt
/ bug: amsn remote DoS vulnerability affected version: = 0.96 site: http://amsn-project.net/ tested: amsn-0.96 on freebsd 6.2 author: levent kayan date: Tue Mar 27 16:04:51 CEST 2007 www.corehack.org / / Introduction / amsn is a free open source MSN Messenger clone. / Technical details / During...
CVE-2007-1529
The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host has sent a spoofed response first, which allows remote attackers to spoof arbitrary hosts via a network-based race condition, aka the "Total Spoof" attack...
CVE-2007-1529
The CVE describes a race-condition vulnerability in the LLTD Responder of Microsoft Windows Vista. If another host sends a spoofed DISCOVERY response first, the Mapper may not receive a response, enabling remote attackers to spoof arbitrary hosts via a network-based Total Spoof attack. The primar...