Dennis Fisher and Mike Mimoso on VENOM, Marketing Bugs, and More

Dennis Fisher and Mike Mimoso talk about the VENOM vulnerability, the idea of marketing bugs, Microsoft’s new Edge browser security features and the awesome CSI: Cyber finale. Download: digitalunderground203.mp3 Music by Chris Gonsalves...

D-Link DSL-500B Gen 2 - URL Filter Configuration Panel Persistent Cross-Site Scripting

!/usr/bin/perl Date dd-mm-aaaa: 13-02-2015 Exploit for D-Link DSL-500B G2 Cross Site Scripting XSS Injection Stored in todmngr.tod URL Filter Developed by Mauricio Corrêa XLabs Information Security WebSite: www.xlabs.com.br CAUTION! This exploit disables some features of the modem, forcing the...

Google then exposed Microsoft Windows 8.1 did not fix the vulnerability-vulnerability warning-the black bar safety net

Recently Microsoft's Windows business head Terry Myerson criticized Google Android poor security, today Google once again exposed the Windows 8.1 did not fix the vulnerability, this means that, In be fix before the vulnerability could be exploited by hackers to. According to the description, the...

Fedora 22 : clamav-0.98.7-1.fc22 (2015-7346)

ClamAV 0.98.7 ============= This release contains new scanning features and bug fixes. - Improvements to PDF processing: decryption, escape sequence handling, and file property collection. - Scanning/analysis of additional Microsoft Office 2003 XML format. - Fix infinite loop condition on crafted...

Mozilla Moving Toward Full HTTPS Enforcement in Firefox

The Mozilla Foundation is initiating the process to phase out insecure HTTP connections in the Firefox browser. The decision is part of a broader movement to encrypt the Web, which in the case of Mozilla Firefox, means permitting only encrypted HTTPS browser connections. Mozilla is the developer ...

Google Releases Password Alert Extension for Chrome

Google is rolling out a new extension for Chrome that will monitor users’ logins and warn them if they enter a Google password on a non-Google page, a move designed to help protect users against phishing attacks. The new extension, called Password Alert, works for both consumer accounts and Googl...

Tor Browser 4.5 - Everything you Need to Safely Browse the Internet

The Tor software protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, it prevents the sites you visit from learning your physical...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in API features in Cisco Unified MeetingPlace 8.61.9 allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884...

Ubuntu 14.04 LTS : MySQL vulnerabilities (USN-2575-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2575-1 advisory. Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to...

[SECURITY] Fedora 22 Update: jline-2.12.1-1.fc22

JLine is a Java library for handling console input. It is similar in functionality to BSD editline and GNU readline. People familiar with the readline/editline capabilities for modern shells such as bash and tcsh will find most of the command editing features of JLine to be familiar...

[SECURITY] Fedora 22 Update: python-httplib2-0.9-6.fc22

A comprehensive HTTP client library that supports many features left out of other HTTP libraries...

USN-2575-1 mysql-5.5 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 5.5.43. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the...

WordPress slideshow plugin RevSlider exploit-vulnerability warning-the black bar safety net

Any read: /wp-admin/admin-ajax. php? action=revslidershowimage&img=../wp-config.php Any upload: !/ usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 1 5 October 2 0 1 4 Coded: 1 5 October 2 0 1 4 Updated: 2 5...

RESTeasy: External entities expanded by DocumentProvider

It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessibl...

Apple iOS telephony subsystem access control vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An access control vulnerability exists in the Apple iOS handling telephony subsystem, which allows attackers to exploit the vulnerability to maliciously access restricted telephony features...

Google Chrome < 41.0.2272.76 Multiple Vulnerabilities

Binary data 8684.pasl...

How to Run Linux Kernel on Canon DSLRs Cameras

Last month, I Got a Canon's amazing and powerful video-capable DSLR Camera and was wondering if I could play a hack on it. Yes, Just like last time I installed and run Linux on my PlayStation 3 gaming console and the popular game console, the Nintendo Wii. What If I could port Linux Kernel to my...

OnePlus OxygenOS Now Available for Download

OnePlus One users might be waiting for the new Lollipop based ROM for their smartphones. The wait is over as the popular Chinese smartphone maker OnePlus has finally released its own custom ROM -- OnePlus OxygenOS, which is based on Android 5.0 Lollipop. Last month, the OnePlus announced the...

Enhanced Protection of UEFI Variables

Summary: New BIOS updates are available for Intel products, enhancing the hardening of certain UEFI variables against potential modification. Intel highly recommends that users install the updates to mitigate this exposure. Description: Intel has become aware that certain firmware implementations...

Fedora 21 : ettercap-0.8.2-1.fc21 (2015-3984)

0.8.2-Ferri Bug Fix !! Fixed some openssl deprecated functions usage !! Fixed log file ownership !! Fixed mixed output print !! Fixed dropprivs function usage !! Fixed nopromisc option usage. !! Fixed missing break in parser code. !! Improved redirect commands !! Fix truncated VLAN packet headers...