Apple releases 'Emergency' Patch after Advanced Spyware Targets Human Rights Activist

Apple has released iOS 9.3.5 update for iPhones and iPads to patch three zero-day vulnerabilities after a piece of spyware found targeting the iPhone used by a renowned UAE human rights defender, Ahmed Mansoor. One of the world's most invasive software weapon distributors, called the NSO Group, h...

Huawei FusionCompute Information Disclosure Vulnerability

Huawei FusionCompute is an enterprise-grade, open server virtualization solution from Huawei, China, based on the Xen open source design. The solution provides automation, advanced integration and management capabilities for virtualized data centers. An information disclosure vulnerability exists...

HP P9000 and XP7 Command View Advanced Edition Software Suite Information Disclosure Vulnerability

HP XP P9000 Command View Advanced Edition Suite Software is a device management software from Hewlett-Packard HP that allows storage management of HP XP P9500, XP Disk Array disk array products. An information disclosure vulnerability exists in HP P9000 and XP7 Command View Advanced Edition...

WordPress Advanced Custom Fields Plugin <= 1.1.12 - Stored Cross Site Scripting

Because of this vulnerability, users can inject JavaScript into pages within /wp-admin/. Solution Upgrade the plugin...

CVE-2016-6257

The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system b...

Attributing Advanced Attacks Remains Challenge For Researchers

Amid the connections being made between the Russian government and the attack on the Democratic National Committee DNC, researchers on Tuesday reminded us of the challenges security experts have in correctly attributing advanced attacks. In a wide-ranging Reddit AMA, members of Kaspersky Lab’s...

[SECURITY] Fedora 23 Update: kf5-kconfig-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon with advanced configuration system made of two parts: KConfigCore and KConfigGui...

[SECURITY] Fedora 23 Update: kf5-ktextwidgets-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 addon with advanced text edting widgets...

[SECURITY] Fedora 23 Update: kf5-ktexteditor-5.24.0-1.fc23

KTextEditor provides a powerful text editor component that you can embed in your application, either as a KPart or using the KF5::TextEditor library if you need more control. The text editor component contains many useful features, from syntax highlighting and automatic indentation to advanced...

[SECURITY] Fedora 23 Update: kf5-threadweaver-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon for advanced thread management...

[SECURITY] Fedora 23 Update: kf5-kcompletion-5.24.0-1.fc23

KCompletion provides widgets with advanced completion support as well as a lower-level completion class which can be used with your own widgets...

[SECURITY] Fedora 24 Update: kf5-kconfig-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon with advanced configuration system made of two parts: KConfigCore and KConfigGui...

[SECURITY] Fedora 24 Update: kf5-ktextwidgets-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 addon with advanced text edting widgets...

[SECURITY] Fedora 24 Update: kf5-threadweaver-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon for advanced thread management...

[SECURITY] Fedora 24 Update: kf5-kcompletion-5.24.0-1.fc24

KCompletion provides widgets with advanced completion support as well as a lower-level completion class which can be used with your own widgets...

WordPress WP Advanced Comment Plugin HTML Injection Vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation.WP Advanced Comment is one of the Ajax-based comment plugins. An HTML injection vulnerability exists in the WordPress WP Advanced Comment plugin. An attacker can exploit this vulnerabilit...

CVE-2016-3546

Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Report JSPs...

CVE-2016-3532

Unspecified vulnerability in the Oracle Advanced Inbound Telephony component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to SDK client integration. NOTE: the previous information is from the July 2016 CP...

Unspecified Vulnerability in Oracle E-Business Suite Advanced Collections

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. Oracle E-Business Suite versions 12.1.1, 12.1.2, and 12.1.3 contain a security vulnerability in the Advanced Collections component that can be exploited by remote attackers to compromise confidentiality,...

Unspecified Vulnerability in Oracle E-Business Suite Advanced Inbound Telephony

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. A security vulnerability exists in Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3 in the Advanced Inbound Telephony component, which can be exploited by remote attackers to compromise...