Fedora 25 : firefox (2016-2967f5f965)

Update to new upstream 50.0.2 - fixes the 0-day vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Opera foreignObject textNode::removeChild Use-After-Free Vulnerability

Opera suffers from a foreignObject textNode::removeChild use-after-free vulnerability. Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the twenty-second entry in that series. Unfortunately I won't be able to publish...

New Firefox/Tor Browser 0-day vulnerability （CVE-2016-9079）

No description provided by source. var worker = new Worker'data:javascript,self.onmessage=functionmsgpostMessage"one";postMessage"two";;'; worker.postMessage"zero"; var svgns = 'http://www.w3.org/2000/svg'; worker.onmessage = functione containerA.pauseAnimations; var craftDOM = function container...

CVE-2016-9448

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service NULL pointer dereference and crash by setting the tags TIFFSETGETC16ASCII or TIFFSETGETC32ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists because of an incomplete fix f...

SUSE SLES12 Security Update : libtcnative-1-0 (SUSE-SU-2016:2871-1)

This update for libtcnative-1-0 fixes the following issues : - Upgrade to libtcnative-1.1.34 bugfix release bsc1004455 See https://tomcat.apache.org/native-1.1-doc/miscellaneous/c hangelog.html - Unconditionally disable export Ciphers. - Improve ephemeral key handling for DH and ECDH. Parameter...

[SECURITY] [DLA 702-1] tzdata new upstream version

Package : tzdata Version : 2016i-0+deb7u1 This update includes the changes in tzdata 2016i. Notable changes are: - Pacific/Tongatapu DST starting on 2016-11-06 at 02:00. - Northern Cyprus is now +03 year round, the Asia/Famagusta zone has been added. - Antarctica/Casey switched from +08 to +11 on...

SSH Brute Force Logins With Default Credentials Reporting

It was possible to login into the remote SSH server using default credentials. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple macOS 10.12 - 'task_t' Local Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=837 TL;DR you cannot hold or use a task struct pointer and expect the euid of that task to stay the same. Many many places in the kernel do this and there are a great many very exploitable bugs as a result. taskt is just a typedef...

[SECURITY] [DSA 3698-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3698-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 24, 2016 https://www.debian.org/security/faq -...

HikVision Security Systems - Activex Buffer Overflow

HikVision Security Systems - Activex Buffer Overflow !/usr/bin/env python The exploit is a part of EAST Framework - use only under the license agreement specified in LICENSE.txt in your EAST Framework distribution visit eastfw.com eastexploits.com for more info import sys import re import os impo...

Drupal 8 configuration file download vulnerability analysis-vulnerability warning-the black bar safety net

Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-09-22 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities,...

How I snooped into your private Slack messages [Slack Bug bounty worth $2,500]

When researching about MX records of slack.com, I noticed that they used a 3rd party email service. In that service, however slack.com was already claimed. After a little more research, I found that all the sub-domains of slack.com like teamname.slack.com also had MX set to the same service. Thes...

A picture can lead to millions of Android phone is black-and-vulnerability warning-the black bar safety net

Google today released the latest Android security Bulletin Android Security Bulletin for a little while ago exposed a series of vulnerabilities to do a patch repair, such as the impact to the 9 billion devices, for high flux chip Quadrooter vulnerability-and this is the Android patch to repair th...

openSUSE Security Update : libtcnative-1-0 (openSUSE-2016-1064) (Logjam)

This update for libtcnative-1-0 fixes the following issues : - Disable 512-bit export-grade cryptography to prevent Logjam vulnerability CVE-2015-4000 bsc938945 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

AIX 7.2 TL 0 : ntp (IV87939) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...

SUSE SLES12 Security Update : libtcnative-1-0 (SUSE-SU-2016:2209-1) (Logjam)

This update for libtcnative-1-0 fixes the following issues : - Disable 512-bit export-grade cryptography to prevent Logjam vulnerability CVE-2015-4000 bsc938945 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE-SU-2016:2209-1 Security update for libtcnative-1-0

This update for libtcnative-1-0 fixes the following issues: - Disable 512-bit export-grade cryptography to prevent Logjam vulnerability CVE-2015-4000 bsc938945...

【Warning Notice】IOS remote jailbreak APT attack security a threat-vulnerability warning-the black bar safety net

! IOS remote jailbreak APT attacks Apple yesterday for IOS released a security update that relates to three 0 day vulnerability, this vulnerability discovery process from the primary APT attack begins. We need to note that, the hacker through the loopholes for remote control and get for IOS users...

iOS exposed serious security vulnerabilities: iPhone user or have been listening for years-vulnerability warning-the black bar safety net

iOS 9.3.5 today emergency line, Apple updated the log there are references to fix the“important security”. If you haven't updated, so please update as soon as possible, because this relates to the iOS security may be“unprecedented”. Apple referred to the important security issue is that of the 3...

Wechat discovered arbitrary code execution vulnerability 3 6 0 mobile Guard provides a self-test programme-vulnerability warning-the black bar safety net

Recently, the 3 6 0 mobile Guard Alpha team-Alpha Team exclusive found wechat remote arbitrary code execution vulnerability, which was named badkernel it. 3 6 0 mobile Guard Alpha team found, through this vulnerability an attacker may access the micro-channel full control, compromise the user's...