7823 matches found
[SECURITY] [DSA-2769-1] kfreebsd-9 security update
---------------------------------------------------------------------- Debian Security Advisory DSA-2769-1 [email protected] http://www.debian.org/security/ Aurelien Jarno October 08, 2013 http://www.debian.org/security/faq -...
13 Anonymous Members indicted and accused of participating in 'Operation Payback'
A U.S. Grand jury indicted and accused 13 members of the hacking group Anonymous for allegedly participating in the cyber attacks against a number of websites as an anti-copyright campaign called "Operation Payback" Hackers took down the sites by inflicting a denial of service, or DDoS, attack,...
13 Anonymous Members indicted and accused of participating in 'Operation Payback'
A U.S. Grand jury indicted and accused 13 members of the hacking group Anonymous for allegedly participating in the cyber attacks against a number of websites as an anti-copyright campaign called "Operation Payback" Hackers took down the sites by inflicting a denial of service, or DDoS, attack,...
Chinese APT Espionage campaign, dubbed 'Icefog' targeted Military contractors and Governments
Kaspersky Lab has identified another Chinese APT campaign, dubbed 'Icefog', who targeted Governmental institutions, Military contractors, maritime / shipbuilding groups, telecom operators, industrial and high technology companies and mass media. The Hacking group behind the attack who carry out...
DEBIAN-CVE-2013-2140
The dispatchdiscardio function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service data loss via filesystem write operations on a read-only disk that supports the 1 BLKIFOPDISCARD aka discard...
Internet Explorer zero-day exploit used watering hole attacks to target Japanese users
Attackers exploiting a zero-day vulnerability CVE-2013-3893 in Microsoft's Internet Explorer browser and served them on compromised popular Japanese news websites. According to FireEye, at least three major Japanese media websites were compromised in watering hole attacks, dubbed Operation...
Internet Explorer zero-day exploit used watering hole attacks to target Japanese users
Attackers exploiting a zero-day vulnerability CVE-2013-3893 in Microsoft’s Internet Explorer browser and served them on compromised popular Japanese news websites. According to FireEye, at least three major Japanese media websites were compromised in watering hole attacks, dubbed Operation...
CVE-2013-5129
CVE-2013-5129 affects WebKit in Apple iOS prior to 7. It describes two user-assisted XSS vectors: (1) drag-and-drop and (2) copy-and-paste, allowing an attacker to inject arbitrary script/HTML via data handled by WebKit. The vulnerability arises from how WebKit processes dragged/pasted content an...
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : libvirt vulnerabilities (USN-1954-1)
It was discovered that libvirt used the pkcheck tool in an unsafe manner. A local attacker could possibly use this flaw to bypass polkit authentication. In Ubuntu, libvirt polkit authentication is not enabled by default. CVE-2013-4311 It was discovered that libvirt incorrectly handled certain...
Kernel: fanotify: info leak in copy_event_to_user
The filleventmetadata function in fs/notify/fanotify/fanotifyuser.c in the Linux kernel through 3.9.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a read operation on the fanotify descriptor...
19-year-old Argentine Hacker arrested for stealing $50,000 monthly
Argentinian police have arrested a 19-year-old "superhacker" who was making $50,000 a month, working from his bedroom in Buenos Aires, by targeting international money transfer and gambling websites. Police say it took them a year to close in on the teenager, who was part of a six-strong gang whi...
FBI compromised Tor hidden service to bust largest Child Pornography Ring
A few days before the servers of the largest provider of Ultra Anonymous hosting were found to be serving custom malware designed to identify visitors who were using the Tor service to hide their identity online. The javascript code exploited a security vulnerability in the open-source version of...
IBM Security AppScan Enterprise 弱密码安全绕过漏洞(CVE-2013-0531)
BUGTRAQ ID: 62179 CVECAN ID: CVE-2013-0531 IBM Securityl AppScan Enterprise 是一个基于Web 的多用户Web 应用程序安全解决方案，提供集中的安全性扫描、数据合并和报告、补救功能、执行仪表板等功能 IBM Security AppScan Enterprise 即之前的IBM Rational AppScan Enterprise 支持使用弱加密算法的SSL套件，攻击者无需本地网络访问及身份验证，即可利用此漏洞解密客户端和服务器之间的通讯，或在客户端上执行中间人攻击，从而获取敏感信息，执行未授权操作 0 IBM...
North Korea Spying on South Korea Using Espionage Malware
For the time being, things on the Korean peninsula may have quieted down politically and militarily. But hackers on both sides continue to take shots at each other. The latest salvo appears to be coming from North Korea, which has been conducting an extensive espionage campaign against specific...
CVE-2013-4283
ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service server crash via a crafted Distinguished Name DN in a MOD operation request...
CVE-2013-4283
ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service server crash via a crafted Distinguished Name DN in a MOD operation request...
DEBIAN-CVE-2013-4283
ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service server crash via a crafted Distinguished Name DN in a MOD operation request...
UBUNTU-CVE-2013-4283
ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service server crash via a crafted Distinguished Name DN in a MOD operation request...
CVE-2013-4283
CVE-2013-4283 affects ns-slapd in 389 Directory Server prior to 1.3.0.8, enabling a remote attacker to crash the server via a crafted DN in a MOD operation. The vulnerability is confirmed by OpenVAS/Open Vulnerability references; remediation is to apply the vendor/security updates that include 38...
