Lucene search
+L

312 matches found

myhack58
myhack58
•added 2015/11/11 12:00 a.m.•17 views

Huawei Mate7 memory Safety vulnerabilities, the versions affected-vulnerability warning-the black bar safety net

! Background description: The vulnerability by qimingxing e active Defense labADLABthe piece wise and smell the concept of rows found, and in 2 0 1 5 year 1 1 July 4, the convening of the CSS China's Internet Security Leaders Summit on disclosure. In the vulnerability information before the publi...

7AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2015/10/15 1:29 p.m.•17 views

WordPress Fixes Stored XSS Vulnerability in Akismet

Developers at Automattic, the parent company behind the blogging platform WordPress, fixed a nasty stored cross-site scripting error this week in Akismet, an anti-spam plugin that figures into millions of websites. The bug was fixed Tuesday in an update, 3.1.5, according to Christopher Finke, an...

5.5AI score
SaveExploits0References6
myhack58
myhack58
•added 2015/07/19 12:00 a.m.•28 views

MS15-0 6 8-Windows Hyper-V remote code execution vulnerability-vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-7/2 0 1 5 7 1 9 1 6 1 4 3 8 1 2 3. png Overview Microsoft THE the release of the security update patches related to Windows operating system vulnerabilities, if in a station by Hyper-V technology to create the virtual machine, there is a proven and there are special...

1.1AI score
SaveExploits0
myhack58
myhack58
•added 2015/06/30 12:00 a.m.•31 views

Away from the Flash, away from the dangerous: from Flash 0day vulnerability disclosure to the integrated penetration tools package, only used 4-day-vulnerability warning-the black bar safety net

6 on 2 7 January, a penetration testing Toolkit Magnitude has been successfully Adobe Flash Player 0day vulnerability, and this time only in the Adobe release fix vulnerabilities patch after four days, kit software the author recently become the fastest to achieve the use of the Flash Player...

0.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2015/04/30 12:00 a.m.•129 views

F5 Networks BIG-IP : BIG-IP Automatic Update Check and ASM Automatic Signature Update man-in-the-middle vulnerability (K16090)

The automatic signature update functionality in the 1 Phone Home feature in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, GTM, and Link Controller 11.5.0 through 11.6.0, ASM 10.0.0 through 11.6.0, and PEM 11.3.0 through 11.6.0 and the 2 Call Home feature in ASM 10.0.0 through 11.6.0 and PEM 11.3.0...

4.3CVSS5.5AI score0.00817EPSS
SaveExploits0References2
Cisco Threats
Cisco Threats
•added 2015/02/17 8:26 p.m.•14 views

Threat Outbreak Alert RuleID13602: Email Messages Distributing Malicious Software on February 17, 2015

Medium Alert ID: 37500 First Published: 2015 February 17 20:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13602 may contain the following files: Name |...

0.5AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2014/12/23 10:17 p.m.•70 views

First Time Ever Apple Automatically Pushes Security Patch for Mac OS

First time ever in the History, Apple Inc. has pushed out an automatic security update for Macintosh OS X computers to address a critical security issue that, according to the company, was too risky to wait for users to patch after seeking their prior approval. Despite having the ability for year...

7.5CVSS9.2AI score0.79069EPSS
SaveExploits1
CERT
CERT
•added 2014/12/05 12:00 a.m.•48 views

Zenoss Core contains multiple vulnerabilities

Overview The Zenoss Core application, server, and network management platform software contains multiple vulnerabilities, the most severe of which could allow a remote attacker to execute arbitrary code. Description The Zenoss Core application, server, and network management platform software...

9.3CVSS8.4AI score0.19683EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•25 views

Nullsoft Winamp 2.80 Automatic Update Check Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. A malicious server located at...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2014/06/17 3:05 p.m.•26 views

Microsoft Malware Protection Engine Denial of Service Bug

Microsoft today released a security advisory alerting users of a serious vulnerability in the antimalware engine present in a number of security products, including Windows Defender, Forefront and others. The update will be automatically pushed down to the Microsoft Malware Protection Engine in t...

4.3CVSS6.7AI score0.13352EPSS
SaveExploits0References4
myhack58
myhack58
•added 2014/04/27 12:00 a.m.•26 views

Adobe warning Flash high-risk vulnerabilities: Mac and PC fast upgrade-vulnerability warning-the black bar safety net

Adobe on Tuesday for the Flash plug-in released a security update that solves allow an attacker to remotely control a user's computer vulnerabilities. According to Adobe, as long as the running version for 1 2. 0. 0. 4 3 or earlier versions of Flash Mac and a Windows machine can be vulnerable to...

3.7AI score
SaveExploits0
Opera Security Advisories
Opera Security Advisories
•added 2013/12/09 12:00 a.m.•23 views

Certificate update

Security Certificate update Share December 9th, 2013 Last week we became aware of the existence of several unauthorized security certificates, issued in violation of rules for creation of such certificates. The certificates chained back to a French certificate authority, ANSSI, and had been signe...

8.8CVSS5.8AI score
SaveExploits0References1
NVD
NVD
•added 2013/08/16 5:55 p.m.•17 views

CVE-2013-4114

The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network...

5CVSS6AI score0.02447EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2013/08/16 5:55 p.m.•25 views

CVE-2013-4114

The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network...

5CVSS5.9AI score0.02447EPSS
SaveExploits0References1
Prion
Prion
•added 2013/08/16 5:55 p.m.•16 views

Format string

The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network...

5CVSS6.6AI score0.02447EPSS
SaveExploits0References7Affected Software1
ThreatPost
ThreatPost
•added 2013/05/15 11:10 a.m.•15 views

Firefox 21 Update Patches 8 Vulnerabilities, 3 Critical

Mozilla fixed eight vulnerabilities, three critical, in the 21st build of its flagship Firefox browser yesterday. One of the fixes remedies an Address Sanitizer memory corruption flaw MFSA 2013-48 that could’ve allowed remote code execution. The other two critical flaws could’ve also led to...

1.9AI score
SaveExploits0References10
Microsoft KB
Microsoft KB
•added 2013/03/12 12:00 a.m.•10 views

Description of the Office Web Apps Server update: March 12, 2013

None None...

6.1AI score
SaveExploits0
myhack58
myhack58
•added 2012/12/26 12:00 a.m.•19 views

Android application lazy listen to the book the automatic updates can be exploited-vulnerability warning-the black bar safety net

Brief description: www.yytingting.com 出品 的 Android 有声读物 软件“lazy listen to the book”, in the automatic update when the verification is insufficient, may be utilized to replace other apk, and ultimately can achieve remote code execution. Detailed description: www.yytingting.com 出品 的 Android 有声读物...

0.3AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2012/05/03 5:14 p.m.•20 views

Expert Warns That WordPress Autoupdate Feature Used To Infect Blogs With Malware

UPDATE: More than 1,000 WordPress blogs are currently being infected by a form of malware that has ‘piggybacked’ its way onto the blogging platform using the WordPress automatic update function, a security researcher has discovered. According to Denis Sinegubko, founder of Unmask Parasites, the...

7.5AI score
SaveExploits0References8
ThreatPost
ThreatPost
•added 2012/04/26 2:24 p.m.•13 views

Opera 12 Beta Released With New Security Features, Including Do Not Track Support

This seems to be the season for major new versions of browsers. A couple of days after Mozilla released Firefox 12, Opera has pushed out a beta of version 12 of its browser, which includes several security updates, such as private browsing and support for the Do Not Track header. The new version ...

0.3AI score
SaveExploits0References2
Rows per page
Query Builder