New Linux Rootkit Attacks Internet Users

Security researchers have discovered what appears to be an experimental Linux rootkit designed to infect its highly select victims during a classic drive-by website attack. The malware allows hackers to inject code directly in any infected web page. The new malware, discovered on November 13 of...

PT-2012-6241

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions 5.15 and earlier Description The issue allows remote attackers to cause a denial of service, read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins...

Design/Logic Flaw

Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory...

CVE-2012-4206

Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory...

PT-2012-5249 · Mozilla +1 · Firefox Esr +2

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 17.0 Mozilla Firefox ESR 10.x versions prior to 10.0.11 Description: The issue is related to an untrusted search path vulnerability in the installer. This vulnerability allows local users to gain privileges v...

Firefox 16.0.1 Ready After Serious Vulnerability Forced Mozilla to Suspend Availability

Mozilla announced it has re-released Firefox 16 after suspending downloads of the latest version of the Firefox browser because of a serious security vulnerability. Firefox 16 was initially released yesterday but was quickly pulled back, Mozilla director of security assurance Michael Coates said ...

Microsoft Report Exposes Malware Families Attacking Supply Chain

Less than a month after the Nitol botnet takedown, Microsoft has released data casting more scrutiny of supply chain security. In its latest Security Intelligence Report SIR for the first half of 2012, Microsoft has connected the most prevalent malware families involved in supply chain compromise...

Mobile Malware Is Up – Way Up – in McAfee Q2 Threat Report

McAfee Labs researchers today announced a surge in malware samples this year – particularly threats that take advantage of mobile networks to launch drive-by downloads, control botnets using Twitter and spread ransomware that locks down infected machines and demand payments from users. The Santa...

Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities (Mac OS X)

This host is installed with Adobe Photoshop and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobephotoshoppngimagefilebofvulnmacosx.nasl 5931 2017-04-11 09:02:04Z teissa $ Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities Mac OS X Authors:...

CVE-2012-1650

The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart downloads" permission when building archives, which allows remote authenticated users with access content permission to bypass intended access restrictions...

CVE-2012-1650: Undefined Security Weakness

The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart downloads" permission when building archives, which allows remote authenticated users with access content permission to bypass intended access restrictions...

The Pirate Bay have nothing to do with Free VPN service

Yesterday someone anonymously posted on Slashdot that The Pirate Bay had launched a free VPN service called PrivitizeVPN https://freevpn.thepiratebay.se/. But Just today team at torrentfreak confirms on behalf of team The Pirate Bay that its not a Pirate Bay project. They're just running it as an...

CVE-2012-2847

Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirmation before continuing a large series of downloads, which allows user-assisted remote attackers to cause a denial of service resource consumption via a craft...

CVE-2012-2847

Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirmation before continuing a large series of downloads, which allows user-assisted remote attackers to cause a denial of service resource consumption via a craft...

Small windows can be used in several ways to trick users into executing downloads

When the download dialog is displayed, it should always be visible to the user, to ensure that the user realizes it is there. If the dialog is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can end...

Google Chrome < 21.0.1180.60 Multiple Vulnerabilities

Binary data 800901.prm...

Google Chrome < 21.0.1180.60 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 21.0.1180.60 and is, therefore, affected by the following vulnerabilities : - Re-prompts are not displayed for excessive downloads. CVE-2012-2847 - Drag and drop file access restrictions are not restrictive enough...

Google Chrome < 21.0.1180.60 Multiple Vulnerabilities

Binary data 6528.pasl...

Scientific Linux Security Update : curl on SL4.x, SL5.x, SL6.x i386/x86_64

cURL provides the libcurl library and a command line tool for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. It was found that cURL always performed credential delegation when authenticating with GSSAPI. A rogue server could use this flaw to obtain the...

PT-2012-4300

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 21.0.1180.57 on Mac OS X and Linux, Google Chrome versions prior to 21.0.1180.60 on Windows and Chrome Frame Description The issue allows user-assisted remote attackers to cause a denial of service due to resour...