696 matches found
Adobe Acrobat/Reader Bypass Information Disclosure Vulnerability (CNVD-2015-06735)
Adobe Reader/Acrobat is a popular application for working with PDF files. An information disclosure bypass vulnerability exists in Adobe Reader/Acrobat. Allowing an attacker to construct a malicious PDF file and trick the user into parsing it, sensitive information can be obtained...
Adobe Flash Player Flash broker for Internet Explorer elevation of privilege vulnerability
Adobe Flash Player is a Flash file handling program. Adobe Flash Player Flash broker for Internet Explorer has a privilege issue that allows remote attackers to construct malicious SWF content and trick users into parsing it with elevated privileges...
Active Defense Can Give Pause to Threats
SAN FRANCISCO – Disrupting hackers on your own network has become sort of a parlor trick for enterprises with enough resources and desire to dive into those waters. Today at RSA Conference, one expert explained how most organizations can leverage networking tools they’ve already invested in to pu...
Websense TRITON AP-EMAIL Clickjacking Vulnerability
Websense TRITON is a unified content architecture to protect data security. A clickjacking vulnerability exists in Websense TRITON AP-EMAIL, which allows attackers to construct malicious URIs, trick users into parsing them, and spoof user communications...
Mozilla: Reading of local files through manipulation of form autocomplete (MFSA 2015-24)
An information leak flaw was found in the way Firefox implemented autocomplete forms. An attacker able to trick a user into specifying a local file in the form could use this flaw to access the contents of that file...
Beeswarm - Active IDS made easy
Beeswarm is an active IDS project that provides easy configuration, deployment and management of honeypots and clients. The system operates by luring the hacker into the honeypots by setting up a deception infrastructure where deployed drones communicate with honeypots and intentionally leak...
Honeypot Deployment Made Easy: Beeswarm
Beeswarm is an active IDS project that provides easy configuration, deployment and management of honeypots and clients. The system operates by luring the hacker into the honeypots by setting up a deception infrastructure where deployed drones communicate with honeypots and intentionally leak...
Apple Safari 4.0.1 Error Page Address Bar URI Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35829/info Apple Safari is affected by a URI-spoofing vulnerability. An attacker may leverage this issue by inserting arbitrary content to spoof a URI presented to an unsuspecting user. This may lead to a false sense of...
Microsoft Internet Explorer 4/5/6 Embedded Image URI Obfuscation Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10308/info It has been reported that Microsoft Internet Explorer is prone to a URI obfuscation weakness that may hide the true contents of a URI link. The issue occurs when an image is contained within a properly formatte...
Shellcodeexec execution shellcode-exploit warning-the black bar safety net
shellcodeexec.x32.exe a Can on windows execute shellcode tools, the use of this feature, you can also use it to execute contained malicious code shellcode, so as to achieve the invasion's purpose. shellcodeexec. x32. exe this tool can to https://github. com/inquisb/shellcodeexec. This website...
Possibly Tricking Users – The Perils of Drag n Drop Decadence
Security Possibly Tricking Users – The Perils of Drag n Drop Decadence Share May 12th, 2014 In the recent Opera 21 Stable release, we fixed a number of bugs relating to the address field. Normally, we would not want to give away too much about a security issue, as it would give a potential attack...
Vulnerability of small summary: the browser in those strange logic-vulnerability warning-the black bar safety net
0x00 introduction As early as a few years ago to see a book the dig 0day act, which introduced a sogou browser vulnerabilities-the forge website, although after a lapse of four years, sogou still made the same mistake, but at that time I only know that there is this treatment, but suffer from on...
Threat Outbreak Alert: Fake Specification Requirements List Email Messages on February 12, 2014.
Medium Alert ID: 32848 First Published: 2014 February 13 16:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a required specification list for the recipient. The text in the email message attempts to convince the...
Safari Phishing Alert Bypass
Abstract: The PhishingAlert of Safari stops functioning in Windows systems if an abnormal URL is being used. Details: There is a defense mechanism in Safari which recognizes URL deceits such as http://[email protected]. The phishing alert will be activated once the HTTP URL that we want to...
Application Installation doorhanger persists on navigation — Mozilla
Mozilla developer Myk Melez reported that with specifically timed page navigation, the doorhanger notification for Web App installation could persist from one site to another without being dismissed by the navigation. This could be used by a malicious site to trick a user into installing an...
Open-Redirect Vulnerability, Fake Government URLs Duping Users
Spammers have recently taken advantage of an open-redirect vulnerability to phish users and trick them into clicking through links that appear to be coming from government .gov URLs. The scam relies on a malformed series of URLs that appear to be coming from 1.USA.gov, a collaboration between...
Truncated dialogs may be used to trick users – Opera Security Advisories
When an important dialog is being displayed, such as a download dialog, the entire dialog should be visible, so that the user can clearly see what the dialog’s buttons will do. In some cases, specific user interactions can cause Opera not to enforce this correctly, allowing the window to become...
Small windows can be used in several ways to trick users into executing downloads – Opera Security Advisories
When the download dialog is displayed, it should always be visible to the user, to ensure that the user realizes it is there. If the dialog is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can end...
Google Disputes Claim of Android Botnet
Google is disputing statements from researchers at Microsoft and Sophos who this week warned that Android devices were sending spam through compromised Yahoo Mail accounts. In response, both now say they are further investigating their earlier claims. The idea of an international Android botnet...