Heap overflow

Heap-based buffer overflow in Aruba Instant IAP with firmware before 4.0.0.7 and 4.1.x before 4.1.1.2 allows remote attackers to cause a denial of service crash or reset to factory default via a malformed frame to the wireless interface...

CVE-2015-1348

Heap-based buffer overflow in Aruba Instant IAP with firmware before 4.0.0.7 and 4.1.x before 4.1.1.2 allows remote attackers to cause a denial of service crash or reset to factory default via a malformed frame to the wireless interface...

CVE-2015-1348

Aruba Instant (IAP) is affected by a heap-based buffer overflow in the wireless interface. Vulnerable on firmware before 4.0.0.7 and on 4.1.x before 4.1.1.2. A remote attacker can cause a denial of service (crash or reset to factory default) by sending a malformed frame to the wireless interface....

Telegram Messenger Offers Large File Sharing up to 1.5GB while you Chat

In spite of all the things smartphones can do, messaging remains one of the most popular activities. Popular messaging apps like WhatsApp, Viber, WeChat support text messages, voice calls, photo & video sharing features, but there is no provision for sharing every file types on these amazing...

Guest Files Restore Missing Drive Using Storage Spaces

Veeam Explorer Appliancation Item Restores Some Application Item Restores use Guest Files Restore on the backend to mount the VM's Guest OS disks and access their contents to perform the application item restore. If the files needed to perform the application item restore are located on a Storage...

[SECURITY] Fedora 20 Update: smack-3.2.2-6.fc20

Smack is an Open Source XMPP Jabber client library for instant messaging and presence. A pure Java library, it can be embedded into your applications to create anything from a full XMPP client to simple XMPP integrations such as sending notification messages and presence-enabling devices...

[SECURITY] Fedora 21 Update: smack-3.2.2-8.fc21

Smack is an Open Source XMPP Jabber client library for instant messaging and presence. A pure Java library, it can be embedded into your applications to create anything from a full XMPP client to simple XMPP integrations such as sending notification messages and presence-enabling devices...

Solaris 10 (sparc) : 148582-08 (deprecated)

Instant Messaging and Presence SDK 9.0: security patch. Date this patch was last updated by Sun : Oct/17/16 This plugin has been deprecated and either replaced with individual 148582 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Combined with the middleman attack, the Pidgin tasteless vulnerability becomes waste into treasure-vulnerability warning-the black bar safety net

The latest version of the open source instant messaging clientPidgin 2.10.10 all this time to fix a series of vulnerabilities, wherein the SSL/TLS certificate validation issue can be exploited by hackers to make MiTM attacks. As a result, some slightly tasteless the vulnerability with man in the...

Failed to lock file on VM PowerOn (SureBackup\Instant Recovery)

Challenge SureBackup or Instant VM Recovery fails with an error relating to failure to power on. The SureBackup log file contains the following error: Info VimApi PowerOffVM, type "VirtualMachine", ref "vm-xxxx" Error SureBackup operation has been failed Info VimApi PowerOffVM, type...

DSA-3055-1 pidgin - security update

Bulletin has no description...

Coinbase: Credit Card Validation Issue

Hi Coinbase, I'm not sure if this counts as a bug, but it definitely counts as a vulerability. The issue is in your credit card verification for instant purchases. The system does not or rarely check the validity of a credit card after it is added. This allows me to make instant buy purchases,...

FileMaker Pro vulnerable to cross-site scripting

Overview FileMaker Pro contains an "Instant Web Publishing" function. When this function is enabled, FileMaker Pro is vulnerable to cross-scripting. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-3640. Impact An arbitrary script may be executed on the user's web browser...

CVE-2014-5754

The Verizon Instant Refills 24/7 aka com.wVerizonInstantRefill247 application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5754

CVE-2014-5754 concerns the Verizon Instant Refills 24/7 Android app (version 0.1) not verifying X.509 certificates from SSL servers, enabling man-in-the-middle attacks to spoof servers and access sensitive data via a crafted certificate. The connected NVD/NVD-derived records confirm the same desc...

[SECURITY] Fedora 20 Update: smack-3.2.2-5.fc20

Smack is an Open Source XMPP Jabber client library for instant messaging and presence. A pure Java library, it can be embedded into your applications to create anything from a full XMPP client to simple XMPP integrations such as sending notification messages and presence-enabling devices...

Mount host is not specified for backup repository “Repository name”

Challenge When attempting to perform an Instant Recovery, Multi-OS FLR, or SureBackup the following error is thrown. Mount host is not specified for backup repository "" Multi-OS Restore: Instant Recovery: SureBackup: Solution Within the settings for the repository specified in the error there is...

Storage vMotion of Instant Recovery fails with “The method is disabled by ‘’”

Challenge When attempting to migrate an Instant Recovery VM to a production datastore using VMware Storage vMotion, the following error occurs: The method is disabled by 'vm-' Call 'VirtualMachine.Relocate' for object 'vmname' on vCenter Server 'vCenterName' failed. Solution To correct this issue...

[SECURITY] Fedora 20 Update: empathy-3.10.3-2.fc20

Empathy is powerful multi-protocol instant messaging client which supports Jabber, GTalk, MSN, IRC, Salut, and other protocols. It is built on top of the Telepathy framework...

Infosec A-Team to Launch NSA-Proof Invisible Messenger for Whistleblowers

If a whistleblower discloses an activity to the public, then there should be a trust-based mechanism that ensure the protection of truth-tellers on an international level by hiding their identities. In an effort to provide this kind of service and security, Security experts grouped together to...