Intel launches Hardware-based Self-Encrypting Solid State Drives

Data security is a big task for businesses as well as a challenge for IT leaders, whether it be securing networks or devices. Past few months, we often came across various data breaches, the largest among all was Target data breach, which cost a business nearly $50,000 in lost productivity,...

linksys wrt54gl firmware 4.30.15 build 2 - Multiple Vulnerabilities

Device Name: Linksys WRT54GL v1.1 Vendor: Linksys/Cisco ============ Vulnerable Firmware Releases: ============ Firmware Version: 4.30.15 build 2, 01/20/2011 ============ Device Description: ============ The Router lets you access the Internet via a wireless connection, broadcast at up to 54 Mbps...

Unauthorized modification of UEFI variables in UEFI systems

Overview Certain firmware implementations may not correctly protect and validate information contained in certain UEFI variables. Exploitation of such vulnerabilities could potentially lead to bypass of security features and/or denial of service for the platform. Description As discussed in recen...

Dropbox Patches Shared Links Privacy Vulnerability

Dropbox has acknowledged and disabled a vulnerable shared links feature that exposed documents stored by the service to third parties. Shared links are a collaboration feature that allows user, especially in a business environment, to share and edit documents. Dropbox rival Intralinks reported th...

Comtrend CT 5361T Password Disclosure Vulnerability

Exploit for hardware platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Comtrend CT 5361T Password Disclosure Vulnerability + Date: 07-04-2014 + Category: WebApp + Tested on: Windows 7 Pro + Vendor: http://www.comtrend.com/ + Product:...

Comtrend CT 5361T Password Disclosure

Author: TUNISIAN CYBER + Exploit Title: Comtrend CT 5361T Password Disclosure Vulnerability + Date: 07-04-2014 + Category: WebApp + Tested on: Windows 7 Pro + Vendor: http://www.comtrend.com/ + Product:...

Microsoft Office Publisher Remote Code Execution Vulnerability (2950145)

This host is missing an important security update according to Microsoft Bulletin MS14-020. OpenVAS Vulnerability Test $Id: gbms14-020.nasl 6715 2017-07-13 09:57:40Z teissa $ Microsoft Office Publisher Remote Code Execution Vulnerability 2950145 Authors: Antu Sanadi Copyright: Copyright C 2014...

Fedora Update for springframework-security FEDORA-2014-3811

Check for the Version of springframework-security OpenVAS Vulnerability Test Fedora Update for springframework-security FEDORA-2014-3811 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

[SECURITY] Fedora 20 Update: springframework-security-3.1.6-1.fc20

Spring Security is a Java/Java EE framework that provides advanced authentication, authorization and other comprehensive security features for enterprise applications. In addition to having a comprehensive list of security functionality, Spring Security is very configurable and employs the Spring...

Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10 x64) - 'CONFIG_X86_X32=y' Local Privilege Escalation (3)

/ ============================== recvmmsg.c - linux 3.4+ local root CONFIGX86X32=y CVE-2014-0038 / x32 ABI with recvmmsg by rebel @ irc.smashthestack.org ----------------------------------- takes about 13 minutes to run because timeout-tvsec is decremented once per second and 0xff3 is 765. some...

Microsoft Protects User Accounts with New Security Features

Microsoft announced yesterday that it will complement the two-factor authentication it enabled for account holders in April with additional security features designed to deny account hijacking and unauthorized access. Windows PC and mobile users, along with Outlook, SkyDrive, Xbox, Skype and othe...

Comodo Internet Security Race Condition Vulnerability-03

Comodo Internet Security is prone to race condition vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: curl-7.29.0-7.fc19

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

iOS 7 Beta Vulnerable to Screen-Lock Bypass

An iPhone user in Spain who downloaded the beta version of Apple iOS 7, which was made available Monday, was able to bypass its screen-lock security feature. The revamped mobile operating system was unveiled by the Cupertino, California technology giant last week at its annual World Wide Develope...

Evernote Two-Factor Authentication for Paid Accounts

Cloud-based note taking service Evernote this week pushed out three new security features including two-factor authentication for some users’ accounts in hopes of adding an extra layer of protection. The service is among the latest to hop on the two-step verification bandwagon, following Amazon...

[SECURITY] Fedora 18 Update: curl-7.27.0-8.fc18

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Apple Releases iOS 6.1.3

Apple has released iOS 6.1.3 for the iPhone 3GS or later, iPod touch 4th generation or later, and iPad 2 or later to address multiple vulnerabilities. These vulnerabilities may allow an attacker to operate with elevated privileges, bypass security features or execute arbitrary code. US-CERT...

Mozilla Releases Multiple Updates

The Mozilla Foundation has released updates for the following products to address multiple vulnerabilities. Firefox 19.0 Firefox ESR 17.0.3 Thunderbird 17.0.3 Thunderbird ESR 17.0.3 SeaMonkey 2.16 These vulnerabilities could allow an attacker to execute arbitrary code, bypass security features, o...

NETGEAR DGN1000B - Multiple Vulnerabilities

NETGEAR DGN1000B - Multiple Vulnerabilities Device Name: DGN1000B Vendor: Netgear ============ Vulnerable Firmware Releases: ============ Firmwareversion: V1.1.00.24 Firmwareversion: V1.1.00.45 Download: http://downloadcenter.netgear.com/de/product/DGN1000 ============ Device Description:...

Linksys WRT54GL 1.1 XSS / OS Command Injection

Device Name: Linksys WRT54GL v1.1 Vendor: Linksys/Cisco ============ Vulnerable Firmware Releases: ============ Firmware Version: 4.30.15 build 2, 01/20/2011 ============ Device Description: ============ The Router lets you access the Internet via a wireless connection, broadcast at up to 54 Mbps...