Privilege Escalation

tor:sid is vulnerable to privilege escalation. A logical error allows unsafe SOCKS4 protocol to be used but not the safe SOCKS4a protocol leading to unsafe traffic being allowed to pass...

[SECURITY] [DSA 5320-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5320-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 16, 2023 https://www.debian.org/security/faq -...

Microsoft Windows 2000 Operating System

Windows 2000 is an older version of Microsoft Windows. Microsoft has ended the support for Windows 2000 operating system on July 13th 2010. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by I...

Microsoft Windows NT 4.0 Operating System

Windows NT 4.0 is an older version of Microsoft Windows. Microsoft ended the support for Windows NT 4.0 operating system on 2004. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Microsoft Internet Explorer 8

Internet Explorer 8 IE8 is an older version of Microsoft Internet Explorer. Using IE8 may indicate suspicious activity. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Portable Executable Files With Weak Encryption (CVE-2013-3900)

Portable Executable PE files can contain encrypted data. PE files with weak data encryption can be decrypted to manipulate the data. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Java User Agent Executable Download

Some executable files can be downloaded to computer systems Java user agent. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Toxin Based Brobot HTTP Request

Blocking specific Toxin Based Brobot HTTP requests. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Scada Modbus Force Listen Only Mode

There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Scada Modbus Read Request To PLC

There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Scada Modbus Restart Communications Option

There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Scada Modbus Write Request To PLC

There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Scada Modbus Clear Counters And Diagnostic Registers

There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

SCADA DNP3 Unsolicited Server Response Flooding

A vulnerability exists in DNP3 protocol An attacker can use this exploit to perform unauthorized actions There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Multiple SSH Initial Connection Requests (CVE-2003-0190; CVE-2006-5229; CVE-2016-6210)

Brute Force Attacks are a significant threat on users privacy. Using Brute Force, remote attackers attempt to gain access to unauthorized areas of a target system, such as FTP accounts, e-mail accounts and databases. By trying to repeatedly log in to an SSH server using different passwords, it is...

Portable Executable (PE) 16-bit File (CVE-2010-0232; CVE-2011-2003)

An elevation of privilege vulnerability exists in the Windows Kernel due to the way the kernel handles certain exceptions. The Windows Kernel is the core of the operating system. It provides system level services such as device management and memory management, allocates processor time to...

Foxy

Foxy is a Traditional Chinese peer to peer file sharing application. It is widely used in Hong Kong, Mainland China and Taiwan. Unlike other peer to peer software, Foxy is very easy to use and has unlimited download capabilities. The use of Foxy may circumvent the organizational security policy...

Comments Inside JPEG Files

JPEG is a very popular image file format. Specially crafted JPEG files may be used to create a DoS condition and in some cases, arbitrary code execution. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is...

Thunder

Thunder AKA Xunlei is a popular peer to peer Chinese download manager and file sharing client that supports BitTorrent, eDonkey, Kad, and FTP. Thunder accelerates downloads by accessing its proprietary P2P network in addition to the given HTTP download. There are cases in which certain traffic,...