Facebook chat history stealing vulnerability, the impact of the billion Messenger users-vulnerability warning-the black bar safety net

In this article, we describe in detail A in Facebook on find Server security vulnerabilities, this vulnerability might affect millions of CORScross-origin resource sharingin the Origin header to allow“NULL”value of the site, the vulnerability will threat the privacy of the user, the malicious...

X (Formerly Twitter): Sub Domain Takeover at mk.prd.vine.co

Hey It looks like the EC2 Instance at mk.prd.vine.co has been stopped and now it has been assigned to someone else Proof of Concept 1. http://mk.prd.vine.co/ few days back didn't have port 443 open but now it does have an open port 443 Response 400 Bad Request 400 Bad Request awselb/2.0 So it loo...

Mozilla: Crash in EnumerateSubDocuments (MFSA 2016-94, MFSA 2016-95)

A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...

CVE-2016-9905

A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...

UBUNTU-CVE-2016-9905

A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...

New Relic: Potential sub-domain hijacking

Hey New Relic Security team, I noticed what appeared to be a configuration oversight and I wanted to mention it to you. The following domains are currently pointing to Fastly: fr.newrelic.com 151.101.192.207 es.newrelic.com 151.101.0.207 When you visit them, you should see something like this:...

Brave Software: Brave: Admin Panel Access

Steps to reproduce While browsing through the https://blog.brave.com/admin, it is getting redirected to a admin login panel https://brave.ghost.io/ghost/signin/. Consequence An attacker can easily enumerate this admin panel with the url such as https://blog.brave.com/admin and with brute force...

Zendesk: Full Sub Domain Takeover at wx.zopim.net

See title...

Algolia: Possilbe Sub Domain takever at prestashop.algolia.com

Hey Sir It looks like prestashop.algolia.com has a A record pointing to 178.62.8.144 But when you visit prestashop.algolia.com you see a page hosted by "BC WebSolution" and I couldn't find any relation with Algolia Now what's suspicious here is http://178.62.8.144/ also serves the content of "BC...

WebSummit: Full Sub Domain Takeover at s3.websummit.net

Hey The sub domain at s3.websummit.net is pointing to dws-content.s3-website-eu-west-1.amazonaws.com. http://s3.websummit.net/ 404 Not Found Code: NoSuchBucket Message: The specified bucket does not exist BucketName: s3.websummit.net RequestId: DB4C92F0D805D3F3 HostId:...

SUSE SLES11 Security Update : openssh (SUSE-SU-2016:2388-1)

This update for OpenSSH fixes the following issues : - Prevent user enumeration through the timing of password processing. bsc989363, CVE-2016-6210 - Allow lowering the DH groups parameter limit in server as well as when GSSAPI key exchange is used. bsc948902 - Sanitize input for xauth1. bsc97063...

D-TECT - Pentesting the Modern Web

D-TECT is an All-In-One Tool for Penetration Testing. This is specially programmed for Penetration Testers and Security Researchers to make their job easier, instead of launching different tools for performing different task. D-TECT provides multiple features and detection features which gather...

[SECURITY] Fedora 24 Update: postgresql-9.5.4-1.fc24

PostgreSQL is an advanced Object-Relational database management system DBM S. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine ...

PCRE Regular Expression Compilation Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of PCRE. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the compilation of regular...

Row Hammer Privilege Escalation - Lenovo Support US

No description provided...

Oracle GlassFish Server 3.0.1 Unspecified Vulnerability (Jul 2016)

Oracle GlassFish Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Informatica: XXE at Informatica sub-domain

Researcher has identified and reported an XXE in one of our domain and helped us in resolving the issue...

The vulnerability of the Java Platform software platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Java SE software platform allows local users to compromise the confidentiality, integrity, and accessibility of data by using a sub-component called Deployment...

The vulnerability of the Java Platform software platform allows a remote attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the Java SE software platform allows a malicious actor to compromise data confidentiality and integrity by utilizing the Security sub-component...

[SECURITY] Fedora 24 Update: gimp-2.8.16-2.fc24

GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for webpages. GIMP has many of the tools and filters you would exp ect to find in similar commercial offerings, and some interesting extras ...