Fedora 20 : curl-7.32.0-17.fc20 (2014-16538)

make CURLOPTLOWSPEEDLIMIT work again with threaded resolver 1172572 - allow to use TLS 1.1 and TLS 1.2 1153814 - disable libcurl-level downgrade to SSLv3 1166567 - low-speed-limit: avoid timeout flood 1166239 - fix handling of CURLOPTCOPYPOSTFIELDS in curleasyduphandle CVE-2014-3707 Note that...

Server: Local Path Disclosure when using Asset Pipeline

ownCloud 7 introduced the so-called "Asset Pipeline". It is disabled by default, but can be enabled by setting asset-pipeline.enabled to true in config.php When the setting is enabled ownCloud concatenates all CSS and JS files into a single large blob file. Thus the amount of initial required...

TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service

Exploit for hardware platform in category dos / poc TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.us Affected version: - Firmware version: 3.17.0 Build 140520 Rel.75075n Released: 5/20/2014 - Firmware...

New Mozilla Privacy Initiative to Include High-Capacity Tor Relays

Mozilla is starting a new initiative that the company says is designed to incorporate more privacy enhancing features into Firefox and the other Mozilla products. The project, known as Polaris, involves collaboration with The Tor Project and the Center for Democracy and Technology and will involv...

WiFi software Acrylic WiFi Free v2.1 - WiFi analyzer software and WLAN scanner for network analysts

Acrylic WiFi Professional is the best WiFi analyzer software to identify access points and wifi channels, and to analyze and resolve incidences on 802.11a/b/g/n/ac wireless networks in real time. It is a perfect tool for advanced users and professional WiFi network analysts and administrators to...

[SECURITY] Fedora 20 Update: qemu-1.6.2-9.fc20

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

CVE-2014-5921

The Need for Speed Network aka com.ea.nfsautolog.bv application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Need for Speed Network aka com.ea.nfsautolog.bv application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5921

The Need for Speed Network aka com.ea.nfsautolog.bv application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5921

The CVE-2014-5921 entry concerns the Need for Speed Network Android app (version 1.0.1) and its SSL/TLS trust handling. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and obtain sensitive information via a craft...

CVE-2014-5921: Undefined Security Weakness

The Need for Speed Network aka com.ea.nfsautolog.bv application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6906

Name of the Vulnerable Software and Affected Versions The Need for Speed Network aka com.ea.nfsautolog.bv application version 1.0.1 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive informati...

CVE-2014-5823

CVE-2014-5823 concerns The Cleaner - Speed up & Clean (com.liquidum.thecleaner) for Android v1.4.2, where SSL servers are not verified against X.509 certificates. This models a classic MITM risk: an attacker could spoof a trusted server and read or alter sensitive data transmitted over TLS. The c...

PT-2014-6808

Name of the Vulnerable Software and Affected Versions The Cleaner - Speed up & Clean aka com.liquidum.thecleaner version 1.4.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not veri...

CVE-2014-5823: Undefined Security Weakness

The The Cleaner - Speed up & Clean aka com.liquidum.thecleaner application 1.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Google Chrome 64-bit Browser Finally Released As a Stable Version

Along with the release of Chrome 37 for Windows, Mac, and Linux, Google today also released a long-awaited 64-bit stable version of its Chrome browser for Windows systems. The company has been working on the 64-bit support for Windows 7 and Windows 8 since June. Back in June, Google first release...

[SECURITY] Fedora 19 Update: python-simplejson-3.5.3-1.fc19

simplejson is a simple, fast, complete, correct and extensible JSON encoder and decoder for Python 2.5+. It is pure Python co de with no dependencies, but includes an optional C extension for a serious sp eed boost. The encoder may be subclassed to provide serialization in any kind of situation,...

Live for Speed Skin Name Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26066/info Live for Speed is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploi...

Live For Speed S1/S2 - Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25327/info Live For Speed is prone to four vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits could allow attackers to execute arbitrary code or to crash game servers...

IPB 3.0.1 - SQL Injection exploit

No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB 3.0.1 sql injection exploit // Version 1.0 // written by Cryptovirus //...