Juniper Networks Junos OS RDP Crash Vulnerability

RDP crash when receiving BGP UPDATE with malformed inetflow prefix. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos...

Heartbleed Cupid Wireless Attacks Expose OpenSSL Over WPA

Regardless that the fervor over the Heartbleed OpenSSL vulnerability has died down considerably, patching the bug should remain a top priority for enterprises because researchers continue to find new exploit vectors. The latest takes aim at Heartbleed over wireless networks. A researcher with...

Analyze Cryptographic Specifications: Cryptol

The Cryptol specification language was designed by Galois for the NSA’s Trusted Systems Research Group as a public standard for specifying cryptographic algorithms. A reference specification can serve as the formal documentation for a cryptographic module. Unlike current specification mechanisms,...

Adobe Reader Multiple Vulnerabilities (Aug 2007) - Linux

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

[SECURITY] Fedora 20 Update: perl-YAML-LibYAML-0.41-4.fc20

Kirill Siminov's "libyaml" is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was original ly bound to Python and was later bound to Ruby...

[SECURITY] Fedora 20 Update: puppet-3.4.2-1.fc20

Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...

MuPDF 1.3 - xps_parse_color() Stack Buffer Overflow

MuPDF 1.3 - xpsparsecolor Stack Buffer Overflow ============================================================= 0day - MuPDF Stack-based Buffer Overflow in xpsparsecolor ============================================================= Date of discovery: 2013-01-26 Software Links: http://www.mupdf.com/...

MuPDF 1.3 - 'xps_parse_color()' Stack Buffer Overflow

============================================================= 0day - MuPDF Stack-based Buffer Overflow in xpsparsecolor ============================================================= Date of discovery: 2013-01-26 Software Links: http://www.mupdf.com/ ; http://en.wikipedia.org/wiki/MuPDF Version:...

Fedora 20 : libgadu-1.12.0-0.2.rc1.fc20 (2013-23260)

From upstream changelog : - Support for Gadu-Gadu 11 protocol. - Enable server certificate verification. - Allow using custom TCP/TLS connection functions. - Allow specifying server by name, not just IP. - Small bugfixes reported by Pidgin project based on Coverity audit. Note that Tenable Networ...

Fedora Update for php-symfony2-HttpFoundation FEDORA-2013-22422

Check for the Version of php-symfony2-HttpFoundation OpenVAS Vulnerability Test Fedora Update for php-symfony2-HttpFoundation FEDORA-2013-22422 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

[Orchid] Tor Client for Java

Orchid is a Tor client implementation and library written in pure Java. It was written from the Tor specification documents, which are available here. Orchid runs on Java 5+ and the Android devices. How can Orchid be used? In a basic use case, running Orchid will open a SOCKS5 listener which can ...

Heap overflow

The scan function in ext/date/lib/parseisointervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted interval specification...

Threat Outbreak Alert: Fake Product Specification Information Request Email Messages on September 22, 2013

Medium Alert ID: 30944 First Published: 2013 September 23 20:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order request for the recipient. The message attempts to persuade the recipient to open the...

Fedora Update for php-symfony2-HttpFoundation FEDORA-2013-14579

Check for the Version of php-symfony2-HttpFoundation OpenVAS Vulnerability Test Fedora Update for php-symfony2-HttpFoundation FEDORA-2013-14579 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Fedora Update for php-symfony2-HttpFoundation FEDORA-2013-14608

Check for the Version of php-symfony2-HttpFoundation OpenVAS Vulnerability Test Fedora Update for php-symfony2-HttpFoundation FEDORA-2013-14608 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

[SECURITY] Fedora 19 Update: php-symfony2-HttpFoundation-2.2.5-1.fc19

The HttpFoundation Component defines an object-oriented layer for the HTTP specification. In PHP, the request is represented by some global variables $GET, $POST, $FILE, $COOKIE, $SESSION... and the response is generated by some funct ions echo, header, setcookie, .... The Symfony2 HttpFoundation...

Having fun with

Did you know that this works in every browser? Look, here's one: An image You might think it's leaking from SVG, but SVG images don't use src, they use xlink:href. Let's all take a moment to laugh at xlink. Done? Ok… In the first age of the web, some people accidentally typed instead of . Browser...

Threat Outbreak Alert: Fake Product Specification Document Email Messages on July 10, 2013

Medium Alert ID: 30021 First Published: 2013 July 10 14:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product document for the recipient. The text in the email message attempts to convince the recipient to open th...

[Salted Hash Kracker v1.5] Recover the Password from Salted Hash text

Salted Hash Kracker is the free all-in-one tool to recover the Password from Salted Hash text. These days most websites and applications use salt based hash generation to prevent it from being cracked easily using precomputed hash tables such as Rainbow Crack. In such cases, 'Salted Hash Kracker'...

Threat Outbreak Alert: Fake Product Services Specification Request Email Messages on August 29, 2013

Medium Alert ID: 29868 First Published: 2013 July 1 18:53 GMT Last Updated: 2013 August 29 12:36 GMT Version: 9 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a business specification and outlines for the recipient. The text in the...