BASHLITE Family Of Malware Infects 1 Million IoT Devices

More than one million consumer web-connected video cameras and DVRs are compromised by bot herders who use the devices for DDoS attacks, researchers say. According to Level 3 Threat Research Labs, a small malware family that goes by the names Lizkebab, BASHLITE, Torlus and Gafgyt is behind a web ...

MiniUPnP DNS Rebind Vulnerability

The remote host is running a version of MiniUPnP that is affected by an unspecified flaw that exists in the Domain Name System DNS related to the 'rebinding' interaction. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a specially crafted web page, to run a...

[SECURITY] Fedora 24 Update: uClibc-0.9.33.2-10.fc24

uClibc is a C library for developing embedded Linux systems. It is much smaller than the GNU C Library, but nearly all applications supported by glibc also work perfectly with uClibc...

OpenJDK: insufficient bytecode verification (Hotspot, 8155981)

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot...

INSIDE Secure MatrixSSL Denial of Service Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. A denial of service vulnerability exists in INSIDE Secure MatrixSSL. An attacker could exploit this vulnerability to cause a denial of service and crash the...

INSIDE Secure MatrixSSL Denial of Service Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. A denial of service vulnerability exists in INSIDE Secure MatrixSSL. An attacker could exploit this vulnerability to cause a denial of service and crash the...

INSIDE Secure MatrixSSL Denial of Service Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. A denial of service vulnerability exists in INSIDE Secure MatrixSSL, which can be exploited by an attacker to crash an application and cause a denial of service...

The vulnerability of the Microsoft Office suite of programs, the Word Viewer program for reading doc files, the Windows operating system, Microsoft Lync and Skype for Business instant messaging programs, and the Live Meeting software used for web conferences allow a perpetrator to execute arbitrary code.

The vulnerability of the Windows font library in the Microsoft Office software suite, as well as programs like Word Viewer for reading DOC files, Windows operating systems, Microsoft Lync and Skype for Business instant messaging applications, and the Live Meeting web conference software, exists d...

Embedded Hardware Hacking 101 – The Belkin WeMo Link

Why Embedded Hacking? Devices that are connected to the Internet or run a full operating system are becoming more and more prevalent in today’s society. From devices for locomotives to wireless light switches, the Internet of Things IoT trend is on the rise and here to stay. This has the potentia...

Embedded Hardware Hacking 101 – The Belkin WeMo Link

Why Embedded Hacking? Devices that are connected to the Internet or run a full operating system are becoming more and more prevalent in today’s society. From devices for locomotives to wireless light switches, the Internet of Things IoT trend is on the rise and here to stay. This has the potentia...

Update for Windows Embedded 8 Standard for x64-based Systems (KB3177723)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Update for Windows Embedded 8 Standard (KB3177723)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

PostgreSQL -- Denial-of-Service and Code Injection Vulnerabilities

PostgreSQL project reports: Security Fixes nested CASE expressions + database and role names with embedded special characters CVE-2016-5423: certain nested CASE expressions can cause the server to crash. CVE-2016-5424: database and role names with embedded special characters can allow code...

OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610...

OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610...

OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610...

Microsoft Windows Graphics Remote Code Execution Vulnerability (CNVD-2016-06272)

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows due to a font library that does not properly handle constructed embedded fonts. This vulnerability could be exploited by an attacker to take full control of an affected...

Microsoft Windows Graphics Remote Code Execution Vulnerability

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows due to a font library that does not properly handle constructed embedded fonts. This vulnerability could be exploited by an attacker to take full control of an affected...

Microsoft Windows Graphics Remote Code Execution Vulnerability (CNVD-2016-06273)

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows due to a font library that does not properly handle constructed embedded fonts. This vulnerability could be exploited by an attacker to take full control of an affected...

Microsoft Lync Attendee Multiple Remote Code Execution Vulnerabilities (3177393)

This host is missing a critical security update according to Microsoft Bulletin MS16-097. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...