A vulnerability which is known to the designers, implementers, or operators of the system, but has not been corrected.
0
votes
0answers
60 views
What major vulnerabilities have there been to TLS libraries? [on hold]
I'm trying to compile a list of large security vulnerabilities in TLS (and SSL) libraries. Examples of things I'm looking for are:
Heartbleed
Goto fail
The Firefox/NSS PKCS11 (IIRC) parsing bug
2
votes
0answers
75 views
Should I cancel my current credit card because of heartbleed vulnerability? [duplicate]
I recently looked at my local credit union bank and they said that their site is not vulnerable to heart bleed. However, I have used my credit card in many websites such as grubhub, amazon, some ...
5
votes
1answer
792 views
Does xkcd.com/1353 overstate heartbleed's capability?
Today's xkcd has characters discussing heartbleed:
Megan: I mean, this bug isn't just broken encryption.
Megan: It lets website visitors make a server dispense random memory contents.
Megan: It's ...
1
vote
1answer
186 views
OpenSSL exploit [closed]
I have read about recent vulnerability in openssl. I tried to exploit one of my cloud servers where I run my web sites. I managed to get 64 KB of data. But what I managed to get was only HTML, CSS, ...
-3
votes
3answers
66 views
How can get email about latest vulnerabilities [closed]
Today my friend got email for the latest vulnerablility heartbleed.
But i could not find where i can subscribe so that i can also get emails about latest vulnerabilities
Can anyone please help me ...
4
votes
2answers
307 views
Are there any known Heartbleed attacks?
Are there any known instances of malicious security breeches exploiting the Heartbleed vulnerability? Or is there at present only a known vulnerability, albeit a very serious one?
4
votes
3answers
1k views
HeartBleed - How to detect compromised websites
Is there a way to determine as an end-user which HTTPS sites use OpenSSL? Due to heartbleed it is recommended that clients change their passwords that were sent over TLS recently as private keys may ...
4
votes
2answers
35 views
How do I know that I'm vulnerable to the: “ Coordinated Website Compromise Campaigns Continue to Plague Internet ”
http://blogs.cisco.com/security/mass-compromise-of-the-obsolete/
and:
All Redhat/CentOS versions plus nearly 100% of linux-based routers run
2.6
Since the article is extremely ...
0
votes
1answer
27 views
Are there limits (or, what are the limits) to our understanding of AES's resistance to known plaintext attacks?
Let's assume the same message is encrypted many times, each time with a different IV but the same key. Do we reach a point where just knowing what that message is gives us a plausible attack by which ...
2
votes
1answer
27 views
What is the exactly mean of these CPE file fields?
I am working in the development of an application that have to download and parse this CPE file definition: http://static.nvd.nist.gov/feeds/xml/cpe/dictionary/official-cpe-dictionary_v2.3.xml
My ...
0
votes
4answers
100 views
How to secure my website's FTP?
When I opened ftp command prompt and typed open mydomain.com, it gave me the following and I think that this is a security vulnerable.
connected to mydomain.com.
220----- Welcome to Pure-FTPd ...
1
vote
0answers
29 views
Tomcat 7 and ETags
I recently got updated by InfoSec that we need to be careful about ETags using Apache WebServer (HTTPD) as they reveal inode and can be exploited especially in NFS etc.
But I am moving to Tomcat 7. ...
1
vote
1answer
239 views
Trying to reproduce a file upload compromise on Joomla
After telling my workmates and boss that we had a very critical lack of security controls, finally we got compromised!
They had a Joomla 1.5 which was exploited using a file upload vulnerability. WSO ...
1
vote
1answer
58 views
automatic connection from LSASS to different IPs. Is this the usual behavior?
I'm using windows 7. firefox 22. connecting through a regular residential wifi router.
In the last month I've noticed that when I connect to the internet and once in a while my firewall indicates me ...
-2
votes
1answer
46 views
websites with vulnerabilities INFO [duplicate]
Websites like
http://www.cvedetails.com/
http://www.securityfocus.com
This websites show information about vulnerabilities and exploits, which other sites are similar?
0
votes
1answer
104 views
Is ASP.net More Secure than PHP in GENERAL? [closed]
In other words, my (long version) question is: Are developers able to get away with, more using ASP.net than PHP in terms of writing secure code for their apps?
I ask this because ASP.net has many ...
1
vote
1answer
66 views
What is LFI vulnerability
LFI: Local file inclusion.
After going through many tutorials I have two things I can/t figure out:
checking the vulnerability: I don't understand what makes a website vulnerable or not. For ...
0
votes
1answer
165 views
How many security holes were discovered in the original version of Windows XP?
In order to steer our future, it is important to understand our past. Now as the end of Windows XP draws near it would be interesting to see how the worlds most popular operating system fared ...
2
votes
2answers
70 views
How do vulnerability reports work?
I'm really interested in IT security and I would like to know how vulnerability reports work.
Is there a central database for those things? I often see CVE-XXX-XXX on disclosures, but I don't ...
0
votes
2answers
430 views
MS12-020: Remote Code Execution
I'm doing some exercises in the lab. My vuln. scanner detects MS12-020 on a few machines.
The report indicates that this could be exploited to allow the execution of code remotely.
To me this would ...
11
votes
7answers
1k views
Can hackers detect my operating system?
I've seen people demonstrating the use of backtrack to attack VMs. In one of the components of backtrack, it shows the operating system of the targets. Since support for Windows XP is ending soon, i ...
0
votes
2answers
137 views
Getting detailed information about an infected website
I have a set of bad URL's. I want to know the nature of infections affecting these URL's . Running an online scanner such as VirusTotal gives me some basic information from various engines about the ...
1
vote
1answer
224 views
Is htaccess secure enought to whitelist clients IPs?
I'm using .htaccess to control source IP of connections to my web application. My configuration looks more or less like this:
order deny,allow
deny from all
allow from X.Y.Z.Q
These ...
-3
votes
1answer
518 views
Wordpress - cleartext admin credentials disclosure
I am testing my own wordpress blog against security issues with wpscan.
Honestly I have never done that before and was shocked after I saw the result.
One vulnerability of my wordpress site is:
[+] ...
2
votes
2answers
207 views
What hacking risks a site has if it has no input boxes?
I recently posted a question about recovery of website from XSS attacks, http://stackoverflow.com/questions/20759081/how-to-recover-a-site-after-an-xss-attack...
Doing a bit more digging online, i ...
0
votes
1answer
37 views
Photo Attachment's Feature For Some Mail Servers [duplicate]
You already know google started new service which is related to gmail.
http://gmailblog.blogspot.com/2013/11/attachments-in-gmail-now-with-power-of.html
When we send new mail to friends.If it ...
4
votes
1answer
110 views
What are the major vulns that affect the Dalvik VM of Android?
I frequently hear about the security risks of using Android. But few people who write articles on this subject ever identify what parts of Android are at fault, nor do they identify design flaws. Can ...
1
vote
3answers
157 views
What is best method for retest blind sql vulnerability
I tested web site application with commercial automated tool.There are some blind sql injection.I want to retest this results .Is there any good method for test blind sql injection with tool or ...
0
votes
1answer
62 views
Is there other vulnerabilities than CVE of NVD
I am aware that there is the CVE list published by the NVD. Are there any other important vulnerabilities lists that show vulnerabilities other than the NVDs?
Thx
1
vote
1answer
78 views
Security risks if a server in not supported anymore
I have an SQL 2000 database server which is not supported by Microsoft anymore. We have our information security policy applied and even PCI requirements.
What are the security risks that we might ...
2
votes
1answer
118 views
I don't quite understand the principle of “use after free” and CVE-2010-1119
I am a rookie hacker studying android vulnerabilities. My partner and I are studying "CVE-2010-1119".
Unfortunately there does not appear to be enough information online. Could anyone please help me ...
4
votes
1answer
163 views
On Hawkes' technique to bypass canaries
I found this reference to bypass canaries: http://sota.gen.nz/hawkes_openbsd.pdf
It recommends to brute force the canary byte-for-byte. I don't understand how this works: "Technique is to brute force ...
0
votes
4answers
142 views
What is a good way to be alerted of major security patches for software I use? [duplicate]
I maintain a few webservers running ubuntu, apache, mysql, and python/django. I update all the libraries quarterly, but I'd like to update more often when a patch for a major vulnerability is ...
0
votes
1answer
731 views
Cable modem/router hidden internal ISP network?
I was querying my router(Thomson TCW750-4) over the SNMP and stumbled upon some interesting information.
I see that the router actually has five separate network configurations operational:
...
0
votes
2answers
138 views
Preventing exploits like ROP and Return-to-libc in modern Operating systems
As I was reading about the advanced exploits such as Return Oriented Programming (ROP), Retun-to-libc, etc., I came across many defenses to these attacks including techniques like ASLR, kBouncer, ROP ...
1
vote
1answer
160 views
If I find a Microsoft Vulnerability do I get credit for reporting it directly to Microsoft?
I know that if you discover a vulnerability in a open source product you have the option of fixing it yourself, creating a bug report or other methods to prove that you have contributed to the ...
9
votes
7answers
8k views
Using google dorks for a specific site?
I need to see if a site I am testing is vulnerable to any of the multiple Google dorks that are available at sites like this and this.
Traditionally, one uses a 'dork' by searching "Index ...
2
votes
1answer
64 views
Test suite for a white-box fuzzer
I have created a white-box fuzzer by extending the Crest.
Now, I'm looking for a test suite (a set of c programs with known vulnerabilities) to test the functionality of my tool.
where i can find ...
1
vote
1answer
118 views
How to check www.abc.com/?page=xyz is vulnerable to RFI or not?
On my friends website when I typed www.abc.com/?page=non existing page, I got page not found error.But when I gave www.abc.com/?page=www.google.com I got blank white page.So is this website ...
6
votes
2answers
213 views
How stack smashing is prevented?
I just read AlephOne's paper on smashing the stack, and implemented it on my machine (Ubuntu 12.04), it was a bit old so had to take a lot of help from the internet but I enjoyed it.
Now, I want to ...
0
votes
1answer
119 views
What vulnerabilities does a malware exploit? [closed]
I have a malware sample. I want to know what vulnerabilities does it exploit (and of which software). I tried analyzing it in IDA Free and it seems that the code was developed in Visual C/C++ runtime. ...
1
vote
3answers
270 views
Vulnerability scanner shows SQL errors were disclosed.How Severe it is?
When I scanned my site for Vulnerabilities I found this error.
Various SQL errors were disclosed within the application source code or other files.
I have checked for sql injection and confirmed ...
2
votes
1answer
327 views
How do I know if a font is malicious?
There are cases of fonts being used for exploiting vulnerabilities {for ex: ThreatPost, SecureList and F-Secure}. My question is if you ever get hands on such a font, how do you know that it is ...
3
votes
2answers
1k views
Help Configuring Cisco Router
I have some network issues in my network due to misconfiguration of Cisco router and switches. Please give me some advice or solutions to fix these vulnerabilities and configuration issues.
...
4
votes
2answers
376 views
How to hack a Win95 machine?
While playing with old operating systems, I came across that there are no remote code execution exploits available for Win95 machines, running just file share (no IIS or anything else). Win95 neither ...
2
votes
3answers
426 views
Top 10 dangerous mistakes in C programming? [closed]
What is the top dangerous mistakes in C programming?
for example misusing a strcpy causes a stack-overflow and code injection.
I'm looking for at least 10 bad programming pattern in C.
2
votes
2answers
749 views
Security behind the windows 8 eye
I use the Windows 8 operating system. Whenever I navigate to the login page of Internet Explorer 10, or even the login screen of the operating system, I see an eye symbol at the end of the password ...
0
votes
4answers
444 views
How can i protect myself from tor vulnerablity on windows
Recently I came across an article regarding Tor. According to article
there is speculation that the uncovered malware was used by a law
enforcement agency to harvest the IP addresses of users ...
1
vote
1answer
101 views
Notification or report for security problem of unix systems? [duplicate]
I have unix systems(Solaris,Oracle,Redhat vs).I have to control all system for security problem,bugs,patch,vulnerabilities
I'm looking for securty information for all security issue
After that I'll ...
-7
votes
1answer
386 views
What are the vulnerabilities on port 23? [closed]
I'm working on a pen-testing project and still in the beginning but I faced a switch with only 80 & 23 ports opened. How can I use these ports to attack that switch ?
