The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
29 views

POODLE - Monitor clients denied by disabling SSLv3

Is it possible via a log or something to view clients rejected by disabling SSLv3? I see the page comes up as "cannot be displayed" but I cannot find my request in any apache logs. It seems the ...
0
votes
2answers
40 views

Should I be worry after opening suspicious Email attachment?

Yesterday, I have received this following suspicious email Normally, I would not click on any of the email attachments if I am not sure about the origin of it. But yesterday, I accidentally opened ...
0
votes
1answer
45 views

How do I report vulnerabilities in Windows?

I have been looking for vulnerabilities in Windows 8 and Windows 7, and would like to report them to Microsoft. Some are extremely important including one that compromises the user's key store ...
1
vote
0answers
13 views

How to make Pixaria work without ini_set()?

I am working on a server which has Pixaria installed. After wasting (yes, completely wasted) hours trying to find out why it showed a blank page, I finally decided to try to enable ini_set() in ...
1
vote
2answers
168 views

Disable SSLv3 in email servers [closed]

After the recent POODLE vulnerability, I would like to disable SSLv3 on my mail servers (for POP, IMAP, and SMTP). My concern is whether that will break my clients' access. I have been looking online ...
0
votes
0answers
17 views

Database showing a list of current vulnerabilities?

I have been recently building my own firewall, but I was wondering is there a website or database which lists majority of the known vulnerabilities so I could obviously update my firewall based on the ...
0
votes
1answer
20 views

Why do URL parameters pose a security threat?

I know with SQL Injection attacks on the rise, websites have to tighten up on security. I understand that 'Dorks' are usually how they get in. Why does e.g. php?id=x pose a possible threat to the ...
0
votes
0answers
127 views

Netgear WNDR4000 open port 53

Why is port 53 open on the WAN side of the router? And more importantly how do I close it? Port 53 is not one of my forwarded ports. Discovered by doing nmap -pT:1-64 <my-external-IP> -Pn ...
10
votes
3answers
3k views

Windows XP Mode Vulnerabilities as of April 8th, 2014

EDIT I appreciate the answers I've gotten so far, but I might not have worded the question clearly enough. Is the Windows 7 side of the machine running in XP Mode exposed to any dangers it would ...
3
votes
4answers
176 views

How risky is it too offset Windows Update for a few days?

After Patch Tuesday, zero days become public vulnerabilities and can be taken advantage of by the crowd. Therefore it becomes doubly important to patch immediately and the obnoxious automatic Windows ...
1
vote
1answer
127 views

Remotely Detect Windows Server Service Pack Level

One of our web servers just failed PCI-DSS compliance because the vuln. scan detected the OS was Windows Server 2003 Service Pack 1 (obviously very outdated!). My question is how did the vuln scan ...
2
votes
2answers
116 views

A possible case of hacked email account. What kind of an attack is this? [closed]

I own a Yahoo mail account. I am using this account for sending resumes and receive notifications from various job portals. But yesterday, I found that some 10-15 mails had been sent to random ...
0
votes
2answers
90 views

What is the least dangerous Java version? [closed]

(other than "none") My organization uses a necessary Java-based web app that will not be replaced in the near future, which runs on Java 1.4 and up. Should our (mostly Windows) users have Java 1.6, ...
1
vote
1answer
89 views

Can a java exploit circumvent browser plug in permission?

Since Java 7 is vulnerable i am asking myself if the vulnerability is circumventing the plug in permission of any given browser. For example: http://www.youtube.com/watch?v=pn1Rbnidhl8 here you see ...
0
votes
1answer
195 views

Port 1111 revealed to be listening on actiontec dsl modem

So my question is much like this one, Port scan revealed port 1111 open. What is it?, but I wasn't able to investigate with the same techniques suggested here, because the device runs busybox. for ...
1
vote
0answers
177 views

Easiest way to install the Ubuntu Mysql Security Patch

I am looking for a quick and easy way to install the security fix for CVE-2012-2122 on my Ubuntu boxes. I don't want to risk installing any of the other updates and I just want to install the ...
1
vote
1answer
47 views

Is there a single site/org for responsible reporting of F/OSS application security vulnerabilities? [closed]

I believe I have found some security vulnerabilities in a popular open-source desktop application, and have contacted one of the application's project organisers via their website. I got in touch ...
2
votes
2answers
2k views

Why is this NMAP scan to a remote host showing me no ports open when the ports REALLY are open?

telnet 99.99.99.99 33491 Trying 99.99.99.99... Connected to 99.99.99.99.. Escape character is '^]' ^] telnet> close Connection closed. As you can see, the above telnet command shows port 33491 is ...
0
votes
1answer
79 views

Vulnerability scanner for Windows?

Are there good (and preferrably free) vulnerability scanners for Windows? Please don't suggest update checkers - I know about Secunia PSI, FileHippo and CNET checker. Secunia PSI 1.5 used to do ...
132
votes
6answers
101k views

Disable Java Plugin in Google Chrome?

This is the second time I've had a drive-by executable installed on my machine using the following: Google Chrome 6 (latest) Windows 7, UAC on This happened while I was browsing for images to add ...
4
votes
2answers
4k views

How does Kerberos' preauthentication increase security?

This FAQ entry (and the RFC itself) states that pre-authentication addresses a weakness in initial implementations of Kerberos that made it vulnerable to offline dictionary attacks. The FAQ state: ...
33
votes
10answers
1k views

Password Cracking Windows Accounts

At work we have laptops with encrypted harddrives. Most developers here (on occasion I have been guilty of it too) leave their laptops in hibernate mode when they take them home at night. Obviously, ...