CVE-2015-1558

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

FreeBSD : asterisk -- File descriptor leak when incompatible codecs are offered (2eeb6652-a7a6-11e4-96ba-001999f8d30b)

The Asterisk project reports : Asterisk may be configured to only allow specific audio or video codecs to be used when communicating with a particular endpoint. When an endpoint sends an SDP offer that only lists codecs not allowed by Asterisk, the offer is rejected. However, in this case, RTP...

dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)

dhclient 4.1 - Bash Environment Variable Command Injection Shellshock !/usr/bin/python Exploit Title: ShellShock dhclient Bash Environment Variable Command Injection PoC Date: 2014-09-29 Author: @fdiskyou e-mail: rui at deniable.org Version: 4.1 Tested on: Debian, Ubuntu, Kali CVE: CVE-2014-6277,...

Threat Outbreak Alert: Fake Software Offer Email Messages on March 3, 2014

Medium Alert ID: 33167 First Published: 2014 March 4 21:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Employment Offer Email Messages on January 31, 2014

Medium Alert ID: 32643 First Published: 2014 January 31 21:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an employment opportunity for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Job Offer Notification Email Messages on January 16, 2014

Medium Alert ID: 32475 First Published: 2014 January 17 14:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Job Offer Information Email Messages on January 9, 2014

Medium Alert ID: 32388 First Published: 2014 January 9 17:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Job Offer Documents Email Messages on December 24, 2013

Severity Alert ID: 32283 First Published: 2014 January 2 14:43 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on December 24, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...

Threat Outbreak Alert: Fake Software Offer Email Messages on December 9, 2013

Medium Alert ID: 32100 First Published: 2013 December 10 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a software offer notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Job Offer Notification Email Messages on November 19, 2013

Medium Alert ID: 31826 First Published: 2013 November 19 17:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer from Altran Company for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Job Offer Inquiry Email Messages on November 12, 2013

Medium Alert ID: 31742 First Published: 2013 November 13 17:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Job Offer Email Messages on July 3, 2013

Medium Alert ID: 29945 First Published: 2013 July 5 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer for the recipient. The text in the email message attempts to persuade the recipient to download a .zip...

Threat Outbreak Alert: Fake Loan Offer Email Messages on June 14, 2013

Medium Alert ID: 29674 First Published: 2013 June 17 11:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a loan offer for the recipient. The text in the email message attempts to convince the recipient to open the...

Unfixed XSS vulnerability at tradingkstocks.com

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting tradingkstocks.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...

Kim Dotcom's New Domain Me.ga Seized before its launch

Kim Dotcom is still fighting a legal battle in New Zealand against the United States over alleged copyright infringement and piracy. Kim Dotcom's upcoming Mega website Me.ga has had its domain name seized by the African nation of Gabon, with a government minister saying his country will not be us...

Windows website loophole allow anyone to get WIndows 8 in just $14.99

Windows 8 launched in 37 languages and 140 worldwide markets, as the tech giant unveiled the new version of its computer operating system. The OS is now available in over 30 certified devices, and a broad selection of local apps are already available in the onboard Windows Store. It is also...

Fake Groupon Provides Great Deal … of Malware

Sophos is warning of a fake Groupon email carrying a Trojan instead of a group discount from a friend. The email mimics the real online coupon company’s branding, but a clue that the message is not legitimate is a misspelling in the subject header: “Groupon dicount gifts.” The fake offer opens wi...

New P2P Zeus Variant Targets Popular Sites with Bogus Offers

Facebook, Gmail, Yahoo and Hotmail users should beware of rogue rebate offers and new secure payment options aimed at getting them to part with their debit card information. Earlier this week Amit Klein, CTO of Trusteer, announced the discovery of a peer-to-peer variant of the Zeus platform that...

CVE-2010-4995

SQL injection vulnerability in the NeoRecruit comneorecruit component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offerview action to index.php, a different vector than CVE-2007-4506...

Anonymous DDOS Oakland police site after violence

Anonymous DDOS Oakland police site after violence Cyber activists associated with Anonymous have targeted the Oakland Police Department OPD and other law enforcement agencies that participated in a controversial crackdown against OccupyOakland protestors. A DDOS distributed denial-of-service atta...