10381 matches found
The Sky is Not Falling--It's Fallen
It’s no fun being a cynic, thinking that everything is bad and getting worse. It’s easy–especially in the security community–but it’s not fun. But, in light of the latest in the interminable string of revelations about the NSA’s efforts to eat away at the foundation of the security industry, the...
OpenEMR 4.1.1 Patch 14 - Multiple Vulnerabilities
OpenEMR is a Free and Open Source electronic health records and medical practice management application that can run on Windows, Linux, Mac OS X, and many other platforms. OpenEMR is ONC Complete Ambulatory EHR certified and is one of the most popular open source electronic medical records in use...
Google, Facebook, Yahoo File NSL Transparency Motions
Google, Yahoo and Facebook filed amended requests today with the U.S. Foreign Intelligence Surveillance Court FISC reiterating their desire to publish numbers on requests for user data related to national security. Google, meanwhile, went a step further asking for an open, public hearing with the...
Snowden-Leaked NSA Budget Shows Code-Breaking Investments
New documents leaked by Edward Snowden quantify the resources supporting an extensive intelligence community crypto-cracking program. Tens of thousands of people and billions of dollars are behind the Consolidated Cryptologic Program, as reported yesterday by The Washington Post. Signals...
LulzSec hacker sentenced to 1 year jail & ordered to pay $605,663 in restitution
A second member of hacking group LulzSec - Raynaldo Rivera, 21, of Tempe, Arizona, has been sentenced to 1 year in prison, 13 months of house arrest, and 1,000 hours of community service for hacking into the computers of Sony Pictures Entertainment. Raynaldo who went by Internet names ”neuron” wa...
[SECURITY] Fedora 18 Update: libreoffice-3.6.7.2-3.fc18
LibreOffice is an Open Source, community-developed, office productivity sui te. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...
Fedora Update for ruby-korundum FEDORA-2013-13112
Check for the Version of ruby-korundum OpenVAS Vulnerability Test Fedora Update for ruby-korundum FEDORA-2013-13112 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Remembering Barnaby Jack
It’s said that each man’s death diminishes us all in some way. But some passings take a bigger piece than others. The death of Barnaby Jack is one of those, having left a major hole in the security community and let a lot of air out of the room. Jack, who died suddenly on July 25 of as-yet unknow...
Congress Warns Section 215 May Not Be Renewed
Incensed at the way that the Department of Justice and the intelligence community have used the controversial section 215 of the PATRIOT Act, members of the House Judiciary Committee on Wednesday angrily questioned Justice and NSA officials about their surveillance of U.S. citizens and said that...
Oracle Linux 3 : net-snmp (ELSA-2009-1124)
From Red Hat Security Advisory 2009:1124 : Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP is a...
Fedora 19 : community-mysql-5.5.31-7.fc19 (2013-10020)
This is an update that uses /var/tmp as default tmpdir to prevent potential issues, fixes CVE-2013-1861 and adds some missing command-line options to man-pages. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
CVE-2013-1777: Improper Control of Generation of Code
The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server WAS Community Edition 3.0.0.3 and other products, does not properly implement the RMI classloader, which allows remote attackers to execute arbitrary code by using the JMX connector to...
Internet Explorer vulnerability exposed by Google Researcher used in targeted attacks
Google and Microsoft are at each other's throats again. In a recent statement, Microsoft says hackers have been actively exploiting a vulnerability that was publicly disclosed by a Google researcher, Tavis Ormandy. Microsoft addressed the vulnerability in its monthly "Patch Tuesday" package of...
Heart of Blue Gold – Announcing New Bounty Programs
Our Philosophy At the heart of our community outreach programs, we’ve always had the same philosophy: help increase the win-win between Microsoft’s customers and the security research community. We have evolved and deepened our relationships with this community since the earliest days of...
TP-Link Print Server TL PS110U - Sensitive Information Enumeration
Exploit for hardware platform in category remote exploits TP-Link TL PS110U Print Server runs telnet service which enables an attacker to access the configuration details without authentication. The PoC can extract device name, MAC address, manufacture name, Printer model, and SNMP Community...
TP-Link Print Server TL PS110U Information Enumeration
Exploit Title: TP-Link Print Server Sensitive Information Enumeration Exploit Author: SANTHO Vendor Homepage: http://www.tp-link.com Software Link: http://www.tp-link.com/en/products/details/?model=TL-PS110U Version: TL PS110U TP-Link TL PS110U Print Server runs telnet service which enables an...
TP-Link PS110U Print Server TL - Sensitive Information Enumeration
TP-Link PS110U Print Server TL - Sensitive Information Enumeration Exploit Title: TP-Link Print Server Sensitive Information Enumeration Exploit Author: SANTHO Vendor Homepage: http://www.tp-link.com Software Link: http://www.tp-link.com/en/products/details/?model=TL-PS110U Version: TL PS110U...
Fedora Update for ruby-korundum FEDORA-2013-10182
Check for the Version of ruby-korundum OpenVAS Vulnerability Test Fedora Update for ruby-korundum FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...