Monthly Archives: October 2014
NSA May Have Undercover Operatives In Foreign Companies
HP To Remove Digital Signature That Code-Signed Malware
Researcher Makes The Case For DDoS Attacks
Vuln: Linux Kernel CVE-2014-3631 Local Denial of Service Vulnerability
Linux Kernel CVE-2014-3631 Local Denial of Service Vulnerability
Vuln: Cisco Intrusion Prevention System CVE-2014-3402 Denial of Service Vulnerability
Cisco Intrusion Prevention System CVE-2014-3402 Denial of Service Vulnerability
Vuln: Yokogawa CENTUM CS3000 'BKCLogSvr.exe' Heap Based Buffer Overflow Vulnerability
Yokogawa CENTUM CS3000 ‘BKCLogSvr.exe’ Heap Based Buffer Overflow Vulnerability
Vuln: Cisco IOS XE Software CVE-2014-3403 Certificate Validation Security Bypass Vulnerability
Cisco IOS XE Software CVE-2014-3403 Certificate Validation Security Bypass Vulnerability
SAP BusinessObjects Explorer 14.0.5 XXE Injection
SAP BusinessObjects Explorer version 14.0.5 is vulnerable to XML External Entity (XXE) attacks. This vulnerability could be triggered by an unauthenticated user, as the login request uses vulnerable XML processing as well.
neuroML 1.8.1 XSS / LFI / XXE Injection / Disclosure
neuroML version 1.8.1 suffers from cross site scripting, local file inclusion, XXE injection, and path disclosure vulnerabilities.