9157 matches found
Weld: Limited information disclosure via stale thread state
It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous...
DEBIAN-CVE-2014-9664
FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted Type42 font, related to type42/t42parse.c and type1/t1load.c...
UBUNTU-CVE-2014-9664
FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted Type42 font, related to type42/t42parse.c and type1/t1load.c...
An attempt to access data before the beginning-of-medium marker failed
Challenge During a tape related process in Veeam Backup & Replication the error "An attempt to access data before the beginning-of-medium marker failed" is thrown. Cause The most common cause of this is faulty tape. Solution If there is no content on the tape try erasing it, if the issue persists...
ZeroCMS Multiple SQL Injection Vulnerabilities (Feb 2015)
ZeroCMS is prone to multiple sql injection vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Telegram Messenger Offers Large File Sharing up to 1.5GB while you Chat
In spite of all the things smartphones can do, messaging remains one of the most popular activities. Popular messaging apps like WhatsApp, Viber, WeChat support text messages, voice calls, photo & video sharing features, but there is no provision for sharing every file types on these amazing...
[SECURITY] [DSA 3148-1] chromium-browser end of life
------------------------------------------------------------------------- Debian Security Advisory DSA-3148-1 [email protected] http://www.debian.org/security/ Michael Gilbert January 31, 2015 http://www.debian.org/security/faq -...
17-Year-Old Found Bugs in WhatsApp Web and Mobile App
Last week, the most popular mobile messaging application WhatsApp finally arrived on the web — dubbed WhatsApp Web, but unfortunately it needs some improvements in its web version. An independent 17-year-old security researcher Indrajeet Bhuyan reported two security holes in the WhatsApp web clie...
MegaChat — Kim Dotcom launches end-to-end encrypted Video Calling Service
Are you worried about your privacy? Its Obvious because of a Hacker or the government could be snooping in your emails, voice or video calls. The Famous Internet entrepreneur Kim Dotcom, who introduced legendary Megaupload and Mega file sharing services to the World, has now released its latest...
Apache Traffic Server Unsupported
According to its banner, the version of Apache Traffic Server running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network...
Spammers Take A Liking to WhatsApp Mobile App
Spammers have settled in on the WhatsApp messaging platform with greater regularity, aided in one locale, by of all things, government regulations. Researchers at AdaptiveMobile yesterday published a report that exposed a number of spam campaigns peddling phony handbags and sunglasses, investment...
Panasonic Arbitrator Back-End Server (BES) Information Disclosure Vulnerability
Panasonic Arbitrator is a surveillance camera application. A security vulnerability exists in the Panasonic Arbitrator 'Back-End' Server, which could be exploited by an attacker to obtain sensitive information...
CVE-2014-9596
Panasonic Arbitrator Back-End Server BES MK 2.0 VPU before 9.3.1 build 4.08.003.0, when USB Wi-Fi or Direct LAN is enabled, and MK 3.0 VPU before 9.3.1 build 5.06.000.0, when Embedded Wi-Fi or Direct LAN is enabled, does not use encryption, which allows remote attackers to obtain sensitive...
Directory traversal
Panasonic Arbitrator Back-End Server BES MK 2.0 VPU before 9.3.1 build 4.08.003.0, when USB Wi-Fi or Direct LAN is enabled, and MK 3.0 VPU before 9.3.1 build 5.06.000.0, when Embedded Wi-Fi or Direct LAN is enabled, does not use encryption, which allows remote attackers to obtain sensitive...
CVE-2014-9596
Panasonic Arbitrator Back-End Server BES MK 2.0 VPU before 9.3.1 build 4.08.003.0, when USB Wi-Fi or Direct LAN is enabled, and MK 3.0 VPU before 9.3.1 build 5.06.000.0, when Embedded Wi-Fi or Direct LAN is enabled, does not use encryption, which allows remote attackers to obtain sensitive...
[SECURITY] [DLA 134-1] curl security update
Package : curl Version : 7.21.0-2.1+squeeze11 CVE ID : CVE-2014-8150 Andrey Labunets of Facebook discovered that cURL, an URL transfer library, fails to properly handle URLs with embedded end-of-line characters. An attacker able to make an application using libcurl to access a specially crafted U...
CVE-2014-8151
The darwinsslconnectstep1 function in lib/vtls/curldarwinssl.c in libcurl 7.31.0 through 7.39.0, when using the DarwinSSL aka SecureTransport back-end for TLS, does not check if a cached TLS session validated the certificate when reusing the session, which allows man-in-the-middle attackers to...
Peerio — End-to-End Encrypted Secure Messenger and File Sharing App
On one end, where governments of countries like U.K is criticizing end-to-end encryption and considering to ban the encrypted communication apps like Snapchat, CryptoCat, WhatsApp and Apple’s iMessage. On the other hand, the Internet community has come up with a new and rather more secure encrypt...
Got a Smartphone with Android 4.3 or earlier? No WebView Vulnerability Patch for You
Owning a smartphone running Android 4.3 Jelly Bean or an earlier versions of Android operating system ?? Then you are at a great risk, and may be this will never end. Yes, you heard right. If you are also one of millions of users still running Android 4.3 Jelly Bean or earlier versions of the...