NVD or at the http://nvd.nist.gov/home.cfm NIST is the National Institute of Standards and Technology. NVD contains: 62145 CVE Vulnerabilities 231 Checklists 248 US-CERT Alerts 2862 US-CERT Vuln Notes 10286 OVAL Queries 89128 CPE Names… National Vulnerability Database (NVD)
Yes Drupal version 7.x – 3.5 now has a remote command injection vulnerability. Packetstormsecurity has a page on it. patch to the latest software (May 3rd or newer) to prevent this. Drupal is a popular Content… Drupal vulnerability – patch your software
Here are the CVE vulnerablities for April 2014 so far. CVE (Common Vulnerabilities and Exposure) vulnerability data are taken from National Vulnerability Database (NVD) xml feeds provided by National Institue of Standards and Technology. The most… CVE vulnerabilities for April – 2014
CVEdetails has a list of all CVE’s This is a vulnerability that is part of the infrastructure of the Internet webservers (Apache specifically) But specifically this is CVE-2014-0094 and this is the line that is important: The… Apache struts vulnerability – not as high profile, but still dangerous
Session Hijacking is where an attacker Steals a network session by guessing (or other ways) the session ID (identification number). Each packet has a session ID in tcp sessions from client to server. Once… Session Hijacking is where attacker obtains access to your computers
Malwarebytes has a good FAQ about the Heartbleed problems we have posted in our own Blog on Oversitesentry as well. Essentially there are online tools (LastPass) to find out if the website you are using is vulnerable.… Media hype on heartbleed – explaining…
First of all, there are many ways a system can become vulnerable, we will not look at the malicious or badly configured machines. We will look at a way to make a vulnerability over time… How does a computer system become vulnerable?
Wired had an article a while ago (January 6th 2014) To understand the problem, you need to understand the embedded systems market. The problem is the chip manufacturers make custom devices with custom parameters, that frequently… Yet another difficult Internet problem: embedded computers are rarely patched
By “casing” can also be called enumeration, where the hacker reviews what type of systems that you have on the Internet. It is the first step in attempting a breach into your infrastructure. Here is… Hackers are casing your computer systems now
On today’s Internet Storm Center Diary : Johannes noticed an odd attack coming from what turned out to be a DVR in China. This is a shape of things to come, unattended devices, which never get patched… Shape of things to come? Bots attacking us?