1245 matches found
CVE-2014-8538
The Hijab Modern aka com.Aisyaidea.HijabModern application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-8538
CVE-2014-8538 affects the Hijab Modern Android app (com.Aisyaidea.HijabModern) version 1.0, which does not verify X.509 certificates when establishing SSL connections. Root cause is missing certificate validation, enabling MITM attackers to spoof servers and access sensitive data via crafted cert...
CVE-2014-8538: Undefined Security Weakness
The Hijab Modern aka com.Aisyaidea.HijabModern application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
[SECURITY] Fedora 19 Update: mksh-50c-1.fc19
mksh is the MirBSD enhanced version of the Public Domain Korn shell pdksh, a bourne-compatible shell which is largely similar to the original AT&T Korn shell. It includes bug fixes and feature improvements in order to produce a modern, robust shell good for interactive and especially script use,...
Early Review of LibreSSL Finds Problematic PRNG
When the OpenBSD foundation sent LibreSSL out the door last weekend, it was with the full intention of getting some feedback and scrutiny in return, all in the name of making the crypto library stable and secure. What they likely didn’t expect were claims surfacing that LibreSSL shared some of th...
LibreSSL Portable Fork Of OpenSSL Released
After months of code cleanup and rewriting, the OpenBSD Foundation this weekend sent LibreSSL out the door. The slimmed down OpenSSL fork works on a number of platforms beyond OpenBSD, including several Linux flavors, Solaris, Mac OS X and Free BSD. “I firmly believe that LibreSSL is in a better...
July 8, 2014 update for Office Web Apps Server 2013 (KB2880990)
None None...
Modern Script <= 5.0 (index.php s) SQL Injection Vulnerability
No description provided by source. / / / || |/ | / | | / | / / / | / / | / / / / | / | | / / / /| | / /\ // ============================================================================== » Note : Hacker R0x Lamerz Sux !...
singapore 0.10.1 Modern Template 'gallery' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27382/info singapore Modern template is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...
FBI, NYPD Form Financial Cybercrime Task Force
The FBI has formed a new cybercrime task force with the New York Police Department and the Metropolitan Transit Authority whose job will be to go after high-level financial cyber crimes, employing a model of interagency cooperation that the bureau and other federal law enforcement agencies have...
Debian Security Advisory DSA 2955-1 (iceweasel - security update)
Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb2955.nasl 6735 2017-07-17 09:56:49Z...
Mail Server In a Box
Mail-Box : Mass electronic surveillance by governments revealed over the last year has spurred a new movement to re-decentralize the web, that is, to empower netizens to be their own service providers again. SMTP, the protocol of email, is decentralized in principle but highly centralized in...
OpenBSD Initiates Fork of OpenSSL, LibreSSL
Heartbleed may have been the final straw, but the movement to create a fork of OpenSSL called LibreSSL had its roots in another issue that made the crypto libraries untenable for folks at OpenBSD. LibreSSL is an initiative spurred on by OpenBSD founder Theo de Raadt to split off and develop a...
[SECURITY] Fedora 20 Update: php-ZendFramework-1.12.5-1.fc20
Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile code base. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and...
Siemens Ruggedcom Addresses BEAST Flaw in WiMax Products
The BEAST attack on some TLS implementations made major news when it was disclosed, showing that attackers could intercept and decrypt SSL-protected sessions in real time, breaking a significant portion of the confidentiality model of the protocol. Vendors rushed to patch and implement mitigation...
HP Unified Functional Testing远程代码执行漏洞
Bugtraq ID:66197 CVE ID:CVE-2013-6210 HP Unified Functional Testing是一款惠普推出高级现代应用测试解决方案。 HP Unified Functional Testing存在一个未明安全漏洞，允许远程攻击者利用漏洞执行任意代码。 0 HP Unified Functional Testing HP Unified Functional Testing 12.0已经修复该漏洞，建议用户下载更新：...
Fedora Update for quassel FEDORA-2014-1734
Check for the Version of quassel OpenVAS Vulnerability Test Fedora Update for quassel FEDORA-2014-1734 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
The Need For Threat-Centric Security
Defenders are at an asymmetric disadvantage when it comes to defending their networks. Attackers spend every minute of their day focused exclusively on penetrating your network to accomplish their mission…and opportunities abound. Today’s modern networks go beyond the walls of the enterprise to...
