178 matches found
Threat Round-up for June 16 - June 23
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between June 16 and June 23. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior characteristics,...
Based on jemalloc Android exploit skills----CENSUS-bug warning-the black bar safety net
Background description jemalloc-related research argp and huku in 2012 in Phrack published on: jemalloc memory allocator a separate use of themade-based on FreeBSD libc POC. argp and huku in 2012 BlackHat published: in Firefo play bad jemalloc metadata. argp in 2015 INFILTRATE on jemalloc exploit...
Chrome Universal XSS using iterables (CVE-2016-1668)
VULNERABILITY DETAILS From /thirdparty/WebKit/Source/bindings/core/v8/Iterable. h: void forEachForBinding... ... v8::LocalcreationContextscriptState-context-Global; v8::Local v8Callbackthe callback. v8Value. As; v8::Localv8ThisArgmethod performs a stable. v8Value; v8::Local args3; args2 =...
Limon - Sandbox for Analyzing Linux Malwares
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect the Linux malware before execution, during execution, and after execution post-mortem analysis by...
Facebook Can Recognize You Even if You Don't Show Your Face
Well, this is incredible and scary both at the same time. Forget about "facial" recognition; Facebook's newest technology is way good at identifying you in photos even without the need to see your face. The New Scientist is reporting about the Facebook's new "experimental" facial recognition...
Shellter v1.7 - Dynamic ShellCode Injector Tool
Shellter is a dynamic shellcode injection tool, and probably the first dynamic PE infector ever created. It can be used in order to inject shellcode into native Windows applications currently 32-bit apps only. The shellcode can be something yours or something generated through a framework, such a...
[PACK] Password Analysis & Cracking Kit
PACK Password Analysis and Cracking Toolkit is a collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other password characteristics. The toolkit generates valid input files for...
Verizon DBIR Analysis: Opportunistic Attacks Crushing Certain Industries
Regardless of the market or industry, the majority of attacks are financially motivated. Even in data-rich environments such as health care, attackers are still after profits and exploit the same weaknesses and transaction processing systems that are vulnerable in other industries such as hotels...
Authentication Implications in Uniquely Identifiable Graphics Cards
Researchers working on the “physically unclonable functions found in standard PC components PUFFIN project” announced last week that widely used graphics processors could be the next step in online authentication. PUFFIN is a joint project between Technische Universiteit Eindhoven in the...
Poll Finds Security Practitioners Falsely Believe They're Protected Against APTs
If a recent poll of 1,000 security professionals is any indication, there remains a significant learning gap in understanding advanced persistent threats – and therefore building a strong defense to resist them. The survey conducted by FireEye’s Malware Intelligence Lab showed nearly 60 percent o...
Create System Characteristics for NIST Windows OVAL Definitions
Create a System Characteristics elements as defined by the OVAL specification for NIST Windows.xml and store it in the Knowledge Base. Note: The created System Characteristics are shown in a separate VT SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a...
An Interview With Telex's J. Alex Halderman
A group of researchers from the University of Michigan and the University of Waterloo have developed a proxy system called Telex that provides a method for users to circumvent state-level censorship of the Web. It uses an architecture that includes a proxy at the ISP level and uses connections to...
Show System Characteristics
Show OVAL System Characteristics if they have been previously gathered and are available in the Knowledge Base. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Create System Characteristics
Create a System Characteristics element as defined by the OVAL specification and store it in the Knowledge Base. Note: The created System Characteristics are shown in a separate VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...
Only modification code [ASM KEYGENME#1]
Решил выложить продолжение своей первой статьи, которая находить тут. В прошлой статье «Реверсинг ASM KEYGENME1 «, в самом начале пропустил момент, с само-модификацией кода тогда мы просто нажали F9, и программа все сделала сама. Сейчас подробней разберем тот фрагмент кода, а лучше напишем...
DEBIAN-CVE-2008-3134
Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...
Unichat Vulnerabilities
Author: DarkKnight My site: http://www.insecureonline.com Product: Unichat Vendor Info.: Did not respond //Quote// "Come here," said the Spider to the Fly. Respected Just a few: ------------------- http://securityfocus.com http://eeye.com http://packetstormsecurity.nl http://jinxhackwear.com...
