2795 matches found
Kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper
The help function in net/netfilter/nfnatirc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature...
Design/Logic Flaw
Cisco IOS before 15.31T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service serial-interface outage via certain Frame Relay traffic, aka Bug ID CSCub13317...
CVE-2012-3918
Cisco IOS before 15.31T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service serial-interface outage via certain Frame Relay traffic, aka Bug ID CSCub13317...
[SECURITY] Fedora 20 Update: socat-1.7.2.3-1.fc20
Socat is a relay for bidirectional data transfer between two independent da ta channels. Each of these data channels may be a file, pipe, device serial l ine etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc.,...
pidgin: DoS in IRC protocol plugin due to arguement parsing
The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service application crash via a crafted message...
Malicious Russian Tor Exit Relays Intercepting encrypted Traffic of Facebook Users
Tor is one of the best and freely available privacy software that lets people communicate anonymously online through a series of nodes that is designed to provide anonymity for users and bypass Internet censorship. When you use the Tor software, your IP address remains hidden and it appears that...
DEBIAN-CVE-2013-7295
Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge platforms, does not properly generate random numbers for 1 relay identity keys and 2 hidden-service identity keys, which might make it easier for remote attackers...
TYPO3 mailforms Unspecified Arbitrary Mail Relay Vulnerability
TYPO3 is prone to arbitrary mail relay vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...
SAP NetWeaver - SMB Relay
Application: SAP Vendor URL: http://www.sap.com Bugs: Security Bypass, Directory Traversal, SMB Relay Exploits: YES Reported: 01.07.2014 Vendor response: 02.07.2014 Date of Public Advisory: 15.12.2014 Reference: SAP Security Note 2077260 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION...
SAP NetWeaver - SMB Relay
Application: SAP Vendor URL: http://www.sap.com Bugs: Security Bypass, Directory Traversal, SMB Relay Exploits: YES Reported: 01.07.2014 Vendor response: 02.07.2014 Date of Public Advisory: 15.12.2014 Reference: SAP Security Note 2056333 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION...
Ruckus protection bypass
It's possible to relay ssh connections without authentication, Web interface authentication bypass, crossite scripting...
Cisco IOS Software DHCP Denial of Service Vulnerability (cisco-sa-20130925-dhcp)
A vulnerability exists in the DHCP implementation of Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability occurs during the parsing of crafted DHCP packets. An attacker could exploit this vulnerability by sending...
NSA using Browser Cookies to track Tor Users
Yesterday a new classified NSA document was leaked by Edward Snowden - titled 'Tor Stinks' in which ideas were being kicked around for identifying Tor users or degrading the user experience to dissuade people from using the Tor browser. The NSA had a very hard time while tracking down all Tor...
13 Anonymous Members indicted and accused of participating in 'Operation Payback'
A U.S. Grand jury indicted and accused 13 members of the hacking group Anonymous for allegedly participating in the cyber attacks against a number of websites as an anti-copyright campaign called "Operation Payback" Hackers took down the sites by inflicting a denial of service, or DDoS, attack,...
RES Workspace Manager Relay Server Detection
The remote service is a RES Workspace Manager Relay Server. It communicates with a central database of RES Workspace Manager, a workspace virtualization platform, or another RES Workspace Manager Relay Server and provides caching services to RES Workspace Manager Agents and other RES Workspace...
Fedora Update for ngircd FEDORA-2013-15290
Check for the Version of ngircd OpenVAS Vulnerability Test Fedora Update for ngircd FEDORA-2013-15290 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
[SECURITY] Fedora 19 Update: ngircd-20.3-1.fc19
ngIRCd is a free open source daemon for Internet Relay Chat IRC, developed under the GNU General Public License GPL. It's written from scratch and is not based upon the original IRCd like many others...
Atlassian Crowd XML External Entity Request Handling Arbitrary File Disclosure
The version of Atlassian Crowd installed on the remote host is affected by an XML External Entity XXE vulnerability. This vulnerability could allow a remote, unauthenticated attacker to retrieve arbitrary files from the remote host by sending a specially crafted HTTP request with a Document Type...
SMTP Open Relay Detection
This module tests if an SMTP server will accept via a code 250 an e-mail by using a variation of testing methods. Some of the extended methods will try to abuse configuration or mailserver flaws. This module requires Metasploit: https://metasploit.com/download Current source:...
