2516 matches found
CVE-2007-6755
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation DualECDRBG algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection...
CVE-2007-6755
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation DualECDRBG algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection...
PT-2013-1372 · Nist · Dual Ec Drbg
Name of the Vulnerable Software and Affected Versions: Dual Elliptic Curve Deterministic Random Bit Generation Dual EC DRBG algorithm affected versions not specified Description: The Dual Elliptic Curve Deterministic Random Bit Generation algorithm contains point Q constants that may have a...
CVE-2007-6755: Use of a Broken or Risky Cryptographic Algorithm
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation DualECDRBG algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection...
August 2013 Security Bulletin Webcast, Q&A, and Slide Deck
Today we’re publishing the August 2013 Security Bulletin Webcast Questions & Answers page. We fielded 13 questions on various topics during the webcast, with specific bulletin questions focusing primarily on Exchange Server MS13-061 and Windows Kernel MS13-063. There were 3 additional questions...
July 2013 Security Bulletin Webcast, Q&A, and Slide Deck
Today we’re publishing the July 2013 Security Bulletin Webcast Questions & Answers page. During the webcast, we fielded 10 questions covering all updates. All questions are included on the Q&A page. We invite our customers to join us for the next scheduled webcast on Wednesday, August 14th at 11...
Hacking DropBox account, Vulnerability allows hacker to bypass Two-Factor Authentication
Q-CERT team found a critical vulnerability that allows the attacker to bypass the two-factor authentication in the most popular file sharing service 'DropBox'. Two Factor Authentication is an extra layer of security that is known as "multi factor authentication" that requires not only a password...
Hacking DropBox account, Vulnerability allows hacker to bypass Two-Factor Authentication
Q-CERT team found a critical vulnerability that allows the attacker to bypass the two-factor authentication in the most popular file sharing service 'DropBox'. Two Factor Authentication is an extra layer of security that is known as “multi factor authentication” that requires not only a password...
June 2013 Security Bulletin Webcast, Q&A, and Slide Deck
Today we’re publishing the June 2013 Security Bulletin Webcast Questions & Answers page. We fielded three questions during the webcast, with specific questions focusing primarily on Windows Print Spooler MS13-050, Microsoft Office MS13-051, and the security advisory addressing digital certificate...
May 2013 Security Bulletin Webcast, Q&A, and Slide Deck
For those who couldn’t attend the live webcast, today we’re publishing the May 2013 Security Bulletin Webcast Questions & Answers page. We fielded 13 questions on various topics during the webcast, with specific bulletin questions focusing primarily on Internet Explorer MS13-037 and MS13-038 and...
PT-2013-1980
Name of the Vulnerable Software and Affected Versions PHP Ticket System Beta 1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the q parameter to the "index.php" endpoint. Recommendations For PHP Ticket System Beta 1, consider restricting acce...
CVE-2012-6516: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute arbitrary SQL commands via the q parameter to index.php...
FedRAMP Question and Answer session from PMO webinar
On October 25, the FedRAMP PMO conducted its first webinar, in what will be a series of webinars, on the FedRAMP process. This first webinar covered the four methods that CSPs can get listed in the FedRAMP repository. This webinar is well worth the time to listen to it. The PMO had a lengthy Q&A...
CVE-2012-4489
Open redirect vulnerability in the secureloginsecureredirect function in the Secure Login module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter...
PT-2012-5435
Name of the Vulnerable Software and Affected Versions Drupal Secure Login module versions 7.x-1.x before 7.x-1.3 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter. This is due to an open redirect...
CVE-2012-4489: Improper Input Validation
Open redirect vulnerability in the secureloginsecureredirect function in the Secure Login module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter...
PT-2012-5768
Name of the Vulnerable Software and Affected Versions PHPB2B versions 4.1 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. Recommendations For PHPB2B...
CVE-2012-5099: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in list.php in PHPB2B 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action...
