5024 matches found
CVE-2013-6695
The RBAC implementation in Cisco Secure Access Control System ACS does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug...
Cracked.com Compromised, Serving Malware
The popular humor website, Crackeddotcom reportedly hosted malware that infected the machines of its visitors over the weekend and may still be doing so, according to Barracuda Labs research. The malware proliferated via drive-by-downloads, and it is not known how many systems became infected as ...
Hackers can remotely control your phone – Android 4.4 break vulnerability with EXP-a vulnerability warning-the black bar safety net
Security expert Jay Freeman discovered Android 4.4 in addition a Master Key vulnerability that allows an attacker to bypass signature verification and malicious code detection, in the legal application to inject malicious code. ! “Android Master Key vulnerability”of the earliest in the last 7...
Google Chrome adds automatic malware blocking for suspicious downloads
Today Malware is a very real threat, and if you're not careful about what you download and install, you could end up with a serious problem. But now Google will be trying their very best to block malware from installing itself on your computer on your behalf. Google has developed a security featu...
Google Chrome to Automatically Block Malicious Downloads
Google is planning to add a new feature to its Chrome browser that will block malicious downloads automatically, helping to prevent drive-by downloads and the kind of malware that rides along with supposedly legitimate software. The new addition to Chrome already is in the development queue,...
Metasploit Modules Available for Seven Open Source Packages
Open source projects with anywhere between 100,000 and 1 million downloads are pretty sizable endeavors, and with the code open for scrutiny, you would think bugs would be found and some sort of disclosure process would be in place. If a spate of recently discovered issues in seven popular softwa...
iMessage Chat app for Android Worries Security Experts
UPDATE – Security experts and mobile developers are warning Android users to steer clear of an app purporting to be an Android version of Apple’s iMessage technology. The app has been pulled from Google Play according to a Google spokesperson, but it remains available on several third party sites...
Jolix Media Player 1.1.0 - .m3u Denial of Service
Jolix Media Player 1.1.0 - .m3u Denial of Service !/usr/bin/python print """ +Judul Ledakan:Jolix Media Player .m3u Denial of Service Exploit +Celah versi: Version 1.1.0 +Mengunduh produk: http://www.jolixtools.com/downloads/jolix-media-player-setup.exe +Hari Tanggal Tahun: 09.07.2013 +Penulis:...
CareerBuilder man in the browser attack
No one can say that hackers don’t have a sense of irony. In search of money mules, attackers behind a variant of the Zeus Trojan have configured the malware to activate when users visit careerbuilder.com with code that redirects victims to an advertisement for a mule-recruitment website...
Fedora 17 : python-virtualenv-1.9.1-1.fc17 (2013-8221)
Fixes two security issues with the bundled copy of pip : - Insecure tempdir usage CVE-2013-1888 - Uses http:// to download packages instead of https:// See changelog at: http://pypi.python.org/pypi/virtualenvid2 Multiple bugfixes. See http://pypi.python.org/pypi/virtualenv/1.7.1.2 for...
CVE-2013-2304
The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger downloads or obtain sensitive HTTP response-body information, via a crafted web page...
[HTTrack Website Copier] Download a Website from the Internet to a Local Directory
HTTrack is a free GPL, libre/free software and easy-to-use offline browser utility. It allows you to download a World Wide Web site from the Internet to a local directory, building recursively all directories, getting HTML, images, and other files from the server to your computer. HTTrack arrange...
commons-configuration
| | math | | 1.2 | |...
Out-of-bounds
Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service out-of-bounds read via vectors related to a "user gesture check for dangerous file downloads."...
CVE-2013-0888
Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service out-of-bounds read via vectors related to a "user gesture check for dangerous file downloads."...
CVE-2013-0888
Removed by vendor...
Google Chrome < 25.0.1364.97 Multiple Vulnerabilities
Binary data 800930.prm...
Google Chrome < 25.0.1364.97 Multiple Vulnerabilities
Binary data 6694.pasl...
Necurs Rootkit infect 83,427 machines in November
Rootkit named as "Necurs" infect 83,427 unique machines during the month of November 2012. It is a multi-purpose rootkits capable of posing a threat to both 32 and 64-bit Windows systems. Distributed via drive-by download on the websites that host the BlackHole exploit kit. Like other rootkits it...
ESA-2012-054: RSA ® Adaptive Authentication (On-Premise) Cross-Site Scripting Vulnerabilities
ESA-2012-054.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-054: RSA ® Adaptive Authentication On-Premise Cross-Site Scripting Vulnerabilities EMC Identifier: ESA-2012-054 CVE Identifier: CVE-2012-4611 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected...