A Death Match of Domain Generation Algorithms

By Hongliang Liu and Yuriy Yuzifovich Originally posted on December 29, 2017 Today's post is all about DGA's Domain Generation Algorithms: what they are, why they came into existence, what are some use cases where they are used, and, most importantly - how to detect and block them. As we will...

CVE-2017-0376

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service assertion failure and daemon exit in the connectionedgeprocessrelaycell function via a BEGINDIR cell on a rendezvous circuit...

Design/Logic Flaw

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service assertion failure and daemon exit in the connectionedgeprocessrelaycell function via a BEGINDIR cell on a rendezvous circuit...

UBUNTU-CVE-2017-0376

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service assertion failure and daemon exit in the connectionedgeprocessrelaycell function via a BEGINDIR cell on a rendezvous circuit...

DEBIAN-CVE-2017-0376

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service assertion failure and daemon exit in the connectionedgeprocessrelaycell function via a BEGINDIR cell on a rendezvous circuit...

CVE-2017-0376

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service assertion failure and daemon exit in the connectionedgeprocessrelaycell function via a BEGINDIR cell on a rendezvous circuit...

Cisco IOS XE Multicast Routing Multiple DoS (cisco-sa-20160928-msdp)

According to its self-reported version number and configuration, the remote Cisco IOS XE device is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to improper validation of packets encapsulated in a PIM register message. An unauthenticated,...

Buffer Overflow Vulnerability in Multiple TIBCO Products

TIBCO Rendezvous is a middleware product that helps users rapidly build and deploy large-scale distributed applications; Substation ES is a substation product that integrates communication software and provides real-time information exchange; Messaging Appliance is a suite of messaging software...

CVE-2015-4555

Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance before 8.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified...

Buffer overflow

Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance before 8.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified...

CVE-2015-4555

Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance before 8.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified...

CVE-2015-4555

The provided documents specify a buffer overflow in the HTTP management interfaces of TIBCO Rendezvous products (Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, Messaging Appliance before 8.7.2). The root cause is an overflow in the HTTP administrative...

TIBCO Rendezvous <= 7.4.11 Password Extractor Local Exploit

No description provided by source...

TIBCO Rendezvous <= 7.4.11 (add router) Remote BOF Exploit

No description provided by source...

TIBCO多个产品多个服务未明跨站脚本漏洞

CVE ID:CVE-2014-2542 TIBCO是一家为能源，制造，零售，健康护理和金融服务产业的公司开发集成軟件的全球公司。 多个TIBCO产品所使用的Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd和Rendezvous Secure Routing Daemon rvsrd产品存在跨站脚本漏洞，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 TIBCO Messaging Appliance...

TIBCO多个产品多个服务未明信息操作漏洞

CVE ID:CVE-2014-2541 TIBCO是一家为能源，制造，零售，健康护理和金融服务产业的公司开发集成軟件的全球公司。 多个TIBCO产品所使用的Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd和Rendezvous Secure Routing Daemon rvsrd产品存在安全漏洞，由于没有正确实现访问控制，允许远程攻击者获得敏感信息或更改传送的信息。 0 TIBCO Messaging Appliance 8.7.0 TIBCO Substation...

CVE-2014-2543

Buffer overflow in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to execute arbitrary...

CVE-2014-2542

Cross-site scripting XSS vulnerability in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers...

CVE-2014-2541

The Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 do not properly implement access control, which allows remote...

Improper access control

The Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 do not properly implement access control, which allows remote...