Internet Bug Bounty: Flash double free vulnerability leads to code execution

This bug was reported directly to Adobe and got assigned CVE-2014-0502. http://helpx.adobe.com/security/products/flash-player/apsb14-07.html This one was actively and it still is exploited since February 12th in watering hole campaigns against nonprofit research institutions and human right...

Security Advisory-A Vulnerability on the HWTACACS Authorization Module of the CloudEngine

The HWTACACS modules of some Huawei CloudEngine series switches have vulnerabilities. Attackers can execute the commands that can be used by users with higher-level permissions by bypass the right check of HWTACACS server. HWPSIRT-2013-1256. This Vulnerability has been assigned Common...

UN Adopts Resolution Protecting Privacy Online

On the same day that a panel of experts delivered a report to the United States president recommending sweeping changes to the way that the National Security Agency collects, handles and stores intelligence, the United Nations unanimously adopted a resolution calling for the protection of users’...

CVE-2013-5448

CVE-2013-5448 is an XSS in IBM QRadar SIEM (Right Click Plugin context menus for IP information). The vulnerability affects QRadar SIEM 7.1 and 7.2 (enabled via ip_context_menu.xml). The IBM bulletin states the attack can be carried out over the network and does not require authentication, potent...

PT-2013-5546

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.1 through 7.2 before 7.2 MR1 Patch 1 Description A cross-site scripting XSS issue exists in the Right Click Plugin context menus, allowing remote authenticated users to inject arbitrary web script or HTML...

CVE-2013-5448: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Right Click Plugin context menus in IBM Security QRadar SIEM 7.1 and 7.2 before 7.2 MR1 Patch 1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

WordPress Right Now theme - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Right Now theme - Arbitrary File Upload Vulnerability Author: Smail Max Date: 10/31/2013 Vendor Homepage: http://themeforest.net/ Themes Link: http://themeforest.net/item/right-now-wp-full-video-image-with-audio/157599...

Oracle Linux 4 : thunderbird (ELSA-2010-0154)

From Red Hat Security Advisory 2010:0154 : An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

Windows Service for User (S4U) Scheduled Task Persistence - Logon Trigger

Creates a scheduled task that will run using service-for-user S4U. This allows the scheduled task to run even as an unprivileged user that is not logged into the device. This will result in lower security context, allowing access to local resources only. The module requires 'Logon as a batch job'...

Win8 Remote Desktop vulnerabilities: the use of QQ Pinyin pure version achieve to mention the right-vulnerability warning-the black bar safety net

Foreword The discovery of this vulnerability, the author is the room class. Are looking to With 3 3 8 9 Remote Desktop to control the hostel computer all the time, because to redo the system to forget its own IP address, and therefore can readily scan a bit in the IP section of the opening 3 3 8 ...

United Socialist Party of Venezuela's twitter account hacked

LulzSec Peru hack the official twitter account @partidopsuv of the United Socialist Party of Venezuela PSUV, in the evening hours of Thursday. Hackers start twitting from hacked account, "No to communism. Corrupt Chavez get out." In a blog post Party people announce that their twitter account is...

VM Right-Sizing report fails with error "Query execution failed for dataset ‘AnalysisDS’"

Challenge VM Right-Sizing report fails with the following error: Query execution failed for dataset 'AnalysisDS'. Error converting data type varchar to numeric. Cause The error occurs because of unsupported decimal separator format on the Collector machine. A dot . is expected as the decimal...

EU to Propose New Data Breach, Privacy Regulations

The European Union EU is preparing to propose new rules that will require companies to disclose data breaches within 24 hours, according to reports. The new rules are aimed at protecting customers and reducing bureaucracy, EU Justice Commissioner Viviane Reding explained in a speech at a conferen...

Report: Anonymous Targets Neo-Nazis

The Anonymous Internet collective’s campaign against groups with whom they disagree surged into 2012 with “Operation Blitzkrieg,” which is targeting Neo-Nazi groups in Germany. Their latest effort includes a Wikileaks-style Website, Nazi-leaks.net, to uncover and expose the identities of...

US military's offensive operations in cyberspace to shoot Hackers

US military's offensive operations in cyberspace to shoot Hackers The US military is now legally in the clear to launch offensive operations in cyberspace, the commander of the US Strategic Command has said. The Pentagon has just sent a report to Congress where it says that it has the right to...

UMP French Political Party got hacked & personal information leaked

UMP French Political Party got hacked & personal information leaked The personal data of several political parliamentarians, ministers, Minister of UMP French Political Party employees were released online by an unknown source. The leak contain the details of Bernard Accoyer, Lionel Tardy, Jean...

UMP French Political Party got hacked & personal information leaked

UMP French Political Party got hacked & personal information leaked The personal data of several political parliamentarians, ministers, Minister of UMP French Political Party employees were released online by an unknown source. The leak contain the details of Bernard Accoyer, Lionel Tardy, Jean...

Anonymous releases 25,000 records of the Austrian police

Anonymous releases 25,000 records of the Austrian police Anonymous Austria post via the official Twitter account about 25,000 records Austrian police officers. Observers suspect that the data from the Austrian section of the "International Police Association" could come. Meanwhile, the far-right...

YieldManager Ad Network Serving Malvertising

One of the world’s largest advertising networks, YieldManager, has been serving ransomware to websites from all over the world. The malvertising campaign was first detected by Armorize’s HackAlert scanning farm. While the websites affected are international, the exploit server itself, at the...

Mozilla Integer overflow and arbitrary code execution (MFSA 2011-22)

Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object...