4954 matches found
DDoS-Happy ‘Bitcoin Baron’ Sentenced to Almost 2 Years in Jail
The Bitcoin Baron, a self-proclaimed vigilante responsible for DDoS attacks on civic networks in Madison, Wisc., San Marcos, Texas, and other sites in 2015, has been collared in Phoenix and sentenced to serve 20 months in prison. The conviction and sentencing is only for the former attack, in whi...
Ex-CIA employee charged with leaking 'Vault 7' hacking tools to Wikileaks
A 29-year-old former CIA computer programmer who was charged with possession of child pornography last year has now been charged with masterminding the largest leak of classified information in the agency's history. Joshua Adam Schulte, who once created malware for both the CIA and NSA to break...
Security Bulletin: IBM StoredIQ is affected by a privilege escalation vulnerability
Summary IBM StoredIQ has addressed the following vulnerability that could allow an authenticated attacker to bypass certain security restrictions. Vulnerability Details CVEID: CVE-2018-1583 DESCRIPTION: IBM StoredIQ could allow an authenticated attacker to bypass certain security restrictions. By...
Security Bulletin: Several vulnerabilities affect Liberty for Java for IBM Bluemix (CVE-2016-2923, CVE-2016-2945, CVE-2016-0359)
Summary There is an information disclosure vulnerability in IBM WebSphere Application Server Liberty for any users of the JAX-RS API. There is a potential for weaker than expected security when using the WebSphere Application Server Liberty profile API Discovery feature and Swagger documents. The...
Microsoft Windows GDI Component Information Disclosure Vulnerability (CNVD-2018-12575)
Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a set of operating systems for use on personal computers.Windows Server 2016 is a set of server operating systems.Windows GDI is one of the graphics device GDI i...
Microsoft Windows Media Foundation Memory Corruption Vulnerability
Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Media Foundation is one of the Media Foundation is one...
Microsoft Publisher Elevation of Privilege Vulnerability
Microsoft Publisher 2010 SP2 is a desktop publishing software from the Office suite of Microsoft USA that can be used to create press releases, postcards, and more. An elevation of privilege vulnerability exists in Microsoft Publisher 2010 SP2 that stems from the program failing to take advantage...
SUSE SLED12 / SLES12 Security Update : poppler (SUSE-SU-2018:1662-1)
This update for poppler fixes the following issues: These security issues were fixed : - CVE-2017-14517: Prevent NULL pointer dereference in the XRef::parseEntry function via a crafted PDF document bsc1059066. - CVE-2017-9865: Fixed a stack-based buffer overflow vulnerability in GfxState.cc that...
DEBIAN-CVE-2017-5376
Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...
CVE-2017-5376
Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...
CVE-2016-9905
A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...
CVE-2017-5376
Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...
CVE-2017-5376
Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...
CVE-2016-9905
A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR 45.6 and Thunderbird 45.6...
Targeted Spy Campaign Hits Russian Service Centers
A series of espionage attacks have been uncovered, targeted at service centers in Russia that provide maintenance and support for a variety of electronic goods. The payload is a commercial version of the Imminent Monitor tool, which is freely available for purchase as legitimate software. Its...
Adobe Patches Zero-Day Flash Flaw
Adobe has released an emergency update to address a critical security hole in its Flash Player browser plugin that is being actively exploited to deploy malicious software. If you've got Flash installed -- and if you're using Google Chrome or a recent version of Microsoft Windows you do -- it's...
Uber: Open AWS S3 bucket at ubergreece.s3.amazonaws.com exposes confidential internal documents and files
The Uber Greece AWS S3 bucket was open, allowing any remote user to view and download the files. Some of these files included confidential internal documents which could negatively impact Uber's brand. I found a uber microsite that had a link to this AWS bucket being used by Uber greece. Had some...
CVE-2016-10546
An arbitrary code injection vector was found in PouchDB 6.0.4 and lesser via the map/reduce functions used in PouchDB temporary views and design documents. The code execution engine for this branch is not properly sandboxed and may be used to run arbitrary JavaScript as well as system commands...
VBScript Script Handlers Code Execution
The vulnerability of VBScript script handlers in Windows operating systems arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...
FBI seizes control of a massive botnet that infected over 500,000 routers
Shortly after Cisco's released its early report on a large-scale hacking campaign that infected over half a million routers and network storage devices worldwide, the United States government announced the takedown of a key internet domain used for the attack. Yesterday we reported about a piece ...