Microsoft Patch Tuesday - 8 Security Updates, 4 critical vulnerabilities, including Internet Explorer zero-day

October is turning out to be a busy month for patches. This month also marks the 10-year anniversary of the Patch Tuesday program, which Microsoft started in October of 2003. Scheduled for tomorrow, Microsoft has announced that they will release eight security updates including four critical,...

PT-2013-5886

Name of the Vulnerable Software and Affected Versions Complete Gallery Manager plugin versions prior to 3.3.4 rev40279 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the /frames/upload-images.php endpoint, and then...

PCI DSS 3.0 puts emphasis on year-round awareness

Its easy to think of PCI compliance as just another annual hoop to jump through. Of course, after the annual audit, the business is safe for another 12 months, right? Well, not exactly, and with the upcoming release of PCI DSS 3.0, there will be an even bigger reason to think about compliance...

CVE-2013-3147

creationtimestamp| type| source ---|---|--- 2013-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28187...

CVE-2013-4977

creationtimestamp| type| source ---|---|--- 2013-08-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27402...

CVE-2013-1298

creationtimestamp| type| source ---|---|--- 2013-06-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26175...

CVE-2013-1606

creationtimestamp| type| source ---|---|--- 2013-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26138...

CVE-2013-3739

creationtimestamp| type| source ---|---|--- 2013-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26125...

Twitter Vine app hacked by 16 year old Web developer

Recently Twitter has rolled out Vine app for Android, A new way to share video on twitter. The free app, which enables people to record and share clips of up to six seconds with other Vine users as well as on Twitter and Facebook. But on the very next day, Twitter's video-sharing application Vine...

Twitter Vine app hacked by 16 year old Web developer

Recently Twitter has rolled out Vine app for Android, A new way to share video on twitter. The free app, which enables people to record and share clips of up to six seconds with other Vine users as well as on Twitter and Facebook. But on the very next day, Twitter’s video-sharing application Vine...

CVE-2013-2945

creationtimestamp| type| source ---|---|--- 2013-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25298...

CVE-2013-1598

creationtimestamp| type| source ---|---|--- 2013-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25139...

CVE-2013-1594

creationtimestamp| type| source ---|---|--- 2013-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25139...

Yahoo! Blind SQL Injection could lead to data leakage

It seems that 2013 is the "Data Leakage Year"! Many customers' information and confidential data have been published on the internet coming from government institutions, famous vendors, and companies too. Ebrahim Hegazy@Zigoo0 an Egyptian information security advisor who found a high severity...

BELL-CVE-2013-3235 CVE-2013-3235 does not affect BellSoft software

Bulletin has no description...

CVE-2013-2498

creationtimestamp| type| source ---|---|--- 2013-04-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24954...

CVE-2013-3050

creationtimestamp| type| source ---|---|--- 2013-04-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24942...

CVE-2013-2637

creationtimestamp| type| source ---|---|--- 2013-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24922...

BELL-CVE-2013-2634 CVE-2013-2634 does not affect BellSoft software

Bulletin has no description...

CVE-2013-7387

creationtimestamp| type| source ---|---|--- 2013-01-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24438 2013-02-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24444...