CVE-2015-7640

Technical details about CVE-2015-7640 are not publicly available in the provided documents; monitor for updates.

UBUNTU-CVE-2015-7644

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...

FreeImage Number Error Vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. An integer overflow vulnerability exists in the PluginPCX.cpp file in FreeImage 3.17.0 and earlier versions. A remote attacker could exploit this vulnerability to cause a denial of service heap memory...

Enabling QR codes in Internet Explorer, or a story of a cross-platform memory disclosure

Posted by Mateusz Jurczyk of Google Project Zero In the previous series of posts parts 1 2 3 4, we discussed the exploitation process of a serious “blend” vulnerability CVE-2015-0093 / CVE-2015-3052, which was special in that it provided the attacker with an extremely powerful primitive arbitrary...

RedHat Update for nss-softokn RHSA-2015:1699-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox Launches Web Extensions API to Support Chrome and Opera Extensions

Should we feel happy about it? Let's find out! What Firefox has been thinking of is, it is planning to bring in Google chrome's web browser extensions to support the features of Mozilla Firefox. The parent company of Firefox i. e. Mozilla Foundation has decided to update their add-on and extensio...

John the Ripper GUI Frontend: Johnny

Johnny the open source cross-platform GUI frontend for John the Ripper, the popular password cracker, written in C++ using the Qt framework. Johnny’s aim is to automate and simplify the password cracking routine on the Desktop as well as add extra functionality like session management and easy...

XPCOM - Race Condition

XPCOM - Race Condition XPCOM Race Condition Vendor: Mozilla Product: XPCOM Version: Website: http://www.mozilla.org/projects/xpcom/ CVE: CVE-2005-2414 OSVDB: 18226 PACKETSTORM: 38837 Description: xpcom, or cross platform component object model is a framework for writing cross-platform, modular...

WordPress Mobile Pack 2.1.2 Information Disclosure

Title: Information Exposure Vulnerability in WordPress Mobile Pack Wordpress Plugin v2.1.2 and below Submitter: Nitin Venkatesh Product: WordPress Mobile Pack Wordpress Plugin Product URL: https://wordpress.org/plugins/wordpress-mobile-pack/ Vulnerability Type: Information ExposureCWE-200 Affecte...

Johnny - GUI for John the Ripper

Johnny is a cross-platform open-source GUI for the popular password cracker John the Ripper. Features 1. user could start, pause and resume attack though only one session is allowed globally, 2. all attack related options work, 3. all input file formats are supported pure hashes, pwdump, passwd,...

UBUNTU-CVE-2015-3119

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging a...

UBUNTU-CVE-2015-3118

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execu...

LibVNCServer: Multiple vulnerabilities

Background LibVNCServer is a cross-platform C library that allows you to easily implement VNC server functionality in your program. Description Multiple vulnerabilities have been discovered in LibVNCServer. Please review the CVE identifiers referenced below for details. Impact A remote attacker m...

Viber Media Viber Non-Printable Character Handling Denial of Service Vulnerability

Viber Media Viber is a cross-platform VoIP and instant messaging software for smartphones. A denial of service vulnerability exists in Viber Media Viber, which can be exploited by remote attackers to crash the application and conduct denial of service attacks...

RedHat Update for nss RHSA-2015:1185-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: filezilla-3.11.0.2-1.fc22

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...

CVE-2015-3103

CVE-2015-3103 concerns Adobe Flash Player and is supported by connected sources that identify it as a race condition leading to a use-after-free. The issue affects Flash Player on Windows, OS X, and Linux, with the vulnerability triggered by a COM object initialization/deinitialization sequence t...

[SECURITY] Fedora 21 Update: mingw-qt5-qtbase-5.4.1-2.fc21

This package contains the Qt software toolkit for developing cross-platform applications. This is the Windows version of Qt, for use in conjunction with the Fedora Windows cross-compiler...

[SECURITY] Fedora 22 Update: mingw-qt5-qtbase-5.4.1-2.fc22

This package contains the Qt software toolkit for developing cross-platform applications. This is the Windows version of Qt, for use in conjunction with the Fedora Windows cross-compiler...

Adobe Flash Player latest Vulnerability, CVE-2 0 1 5-3 0 4 4: The camera and microphone can be remote control-vulnerability warning-the black bar safety net

Researchers recently found that Adobe Flash Player some version vulnerability exists, an attacker could exploit the vulnerability can be by means of PC built-in camera and microphone for the user to be monitored. Vulnerability description The Flash Player configuration panel there is a list of...