CVE-2017-6885

An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges...

WikiLeaks Reveals Two CIA Malware Frameworks

WikiLeaks released details on what it claims are two frameworks for malware samples dubbed AfterMindnight and Assassin, both allegedly developed by the U.S. Central Intelligence Agency. The revelations come amid worldwide efforts to squelch variants of the WannaCry ransomware, an offensive hackin...

WikiLeaks Reveals CIA Tool 'Scribbles' For Document Tracking

Update WikiLeaks released details on what it said is a Central Intelligence Agency document tracking program called Scribbles, part of the agency’s effort to keep tabs on documents leaked to whistleblowers and journalists. Scribbles allegedly embeds a web beacon-style tag into watermarks located ...

Source Code for CIA’s Tool to Track Whistleblowers Leaked by Wikileaks

Wikileaks has just published a new batch of the Vault 7 leak, exposing the documentation and source code for a CIA project known as "Scribbles." Scribbles, a.k.a. the "Snowden Stopper," is a piece of software allegedly designed to embed 'web beacon' tags into confidential documents, allowing the...

chepstowbeacon.co.uk XSS vulnerability

Vulnerable URL: http://www.chepstowbeacon.co.uk/search.cfm?sectionIs=search=LocalNews=2011="--!"= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5031297 VIP website status:| No...

CISCO-SA-20170315-ASR

creationtimestamp| type| source ---|---|--- 2017-03-15 22:20:58+00:00| seen| https://t.me/canyoupwnme/950...

Sends Beacons to Scan for Active ZigBee Networks

Post Module to send beacon signals to the broadcast address while channel hopping This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Sends Beacons to Scan for Active ZigBee Networks', 'Description...

Hijacker - Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android

Hijacker is a Graphical User Interface for the wireless auditing tools airodump-ng, aireplay-ng and mdk3. It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses. This application requires an android device with a wireless adapter that...

video.freebeacon.com XSS vulnerability

Vulnerable URL: http://video.freebeacon.com/Alan-Thicke-Has-Died-at-Age-69-31740808?playlistId="// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

How to Configure Internal Beacon for Single FQDN on StoreFront

This article describes how to Configure Internal Beacon for Single FQDN on StoreFront. Background When you access any URL in Citrix Receiver, it tries to resolve both internal and external beacons. First it will resolve the internal beacon, followed by the external beacon, and then Citrix Receive...

Vulnerability Identified in Genomic Data Sharing Network

A vulnerability in a network that processes genomic data could pave the way to some global genetic databases being hacked, and open the door to some serious privacy issues. Experts claim the problem lies in The Beacon Project, a network run by a coalition, Global Alliance for Genomics and Health,...

CVE-2009-2844

cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service crash via a sequence of beacon frames in which one frame omits an SSID Information Element IE and the subsequent frame contains an SSID IE, whic...

Unspecified Vulnerability in the 802.11n Wireless Network Standard Frame Aggregation Mechanism

802.11 protocol group is the International Electrotechnical and Electronics Engineering Society IEEE for wireless local area network standard. 802.11n is in 802.11g and 802.11a above the development of a technology, the most important feature is the rate of enhancement, the theoretical rate of up...

Updated firefox & thunderbird packages fix security vulnerabilities

Updated firefox and thunderbird packages fix security vulnerabilities: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user...

USN-2552-1 thunderbird vulnerabilities

Olli Pettay and Boris Zbarsky discovered an issue during anchor navigations in some circumstances. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to bypass same-origin policy restrictions. CVE-2015-0801 Christoph...

Mozilla Firefox/Thunderbird navigator.sendBeacon implements CORS access control check bypass vulnerability

Mozilla Firefox/SeaMonkey is a WEB browser/newsgroup client released by Mozilla. A CORS access control check bypass vulnerability in the HTTP 30X status code of the Mozilla Firefox Onavigator.sendBeacon implementation that handles redirects allows remote attackers to exploit the vulnerability to...

Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20150401)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2015-0813, CVE-2015-0815, CVE-2015-0801 A flaw was found in the wa...

Multiple Mozilla Products navigator.sendBeacon Cross-Site Request Forgery Vulnerability

Mozilla Firefox, Firefox ESR and Thunderbird are all developed by the Mozilla Foundation.Firefox is an open source web browser, Firefox ESR is an extended support version of Firefox.Thunderbird is a standalone email client from the Mozilla Thunderbird is a separate email client from Mozilla...

Important: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Mozilla: CORS requests should not follow 30x redirections after preflight (MFSA 2015-37)

A flaw was found in the Beacon interface implementation in Firefox. A web page containing malicious content could allow a remote attacker to conduct a Cross-Site Request Forgery CSRF attack...