Dark web data center in former NATO bunker seized for hosting child porn

By Waqas Authorities raided and seized a massive data bunker called “Cyberbunker 2.0” used by dark web criminals to run drugs, explicit child content. This is a post from HackRead.com Read the original post: Dark web data center in former NATO bunker seized for hosting child porn...

Design/Logic Flaw

OpenSSL 1.1.1 introduced a rewritten random number generator RNG. This was intended to include protection in the event of a fork system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A...

CVE-2019-1549

OpenSSL 1.1.1 introduced a rewritten random number generator RNG. This was intended to include protection in the event of a fork system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A...

CVE-2019-1549 Fork Protection

OpenSSL 1.1.1 introduced a rewritten random number generator RNG. This was intended to include protection in the event of a fork system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A...

600,000 GPS child trackers found vulnerable to location tracking

By Sudais Avast set out to study a variety of GPS tools found on the internet and how secure they are which can be found on Amazon, Alibaba, and eBay among others. This is a post from HackRead.com Read the original post: 600,000 GPS child trackers found vulnerable to location tracking...

Fork Protection

OpenSSL 1.1.1 introduced a rewritten random number generator RNG. This was intended to include protection in the event of a fork system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A...

CVE-2019-15822

The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal...

CVE-2019-15822

CVE-2019-15822 affects the WordPress plugin wps-child-theme-generator (before v1.2). The vulnerability is a directory traversal flaw in the plugin’s classes/helpers.php, enabling access to files outside the intended directory. Public sources (NVD/Red Hat/CNVD/CVE listings) consistently describe a...

Information Disclosure

PHP is vulnerable to information disclosure. It has dumpable FPM child processes which allow bypassing opcache access controls because fpmunix.c calls PRSETDUMPABLE prctl...

The vulnerability of Firefox ESR, Firefox, and the email client Thunderbird exists due to insufficient checking of parameters in messages from the child process to the parent process. This allows a malicious actor to execute arbitrary code.

The vulnerability of Firefox ESR, Firefox, and the email client Thunderbird exists due to insufficient checking of parameters in messages from the child process to the parent process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by causing...

GHSA-8RF6-W2MX-4XJH Undirectional routing wasn't respected in some cases in Mitogen

core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetica...

Unidirectional-Routing Misconfiguration

mitogen contains a unidirectional-routing misconfiguration. The misconfiguration causes the unidirectional-routing protection mechanism to be dropped when a child process is initiated by another child. Ansible extension is not affected...

PYSEC-2019-104

DISPUTED core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with...

A week in security (August 5 – 11)

Last week on Malwarebytes Labs, we explained how brain-machine interface BMI technology could usher in a world of Internet of Thoughts, why having backdoors is problematic, and how we can improve the security of our smart homes. To cap off Hacker Summer Camp week, the Labs team released a special...

How to get the Organization Units (OU) and Hosts from Microsoft Active Directory using Python ldap3

I recently figured out how to work with Microsoft Active Directory using Python 3. I wanted to get a hierarchy of Organizational Units OUs and all the network hosts associated with these OUs to search for possible anomalies. If you are not familiar with AD, here is a good thread about the...

NewStart CGSL MAIN 4.05 : coreutils Vulnerability (NS-SA-2019-0107)

The remote NewStart CGSL host, running version MAIN 4.05, has coreutils packages installed that are affected by a vulnerability: - A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with ro...

Code Execution Vulnerability in ZZCMS2019

ZZCMS with product investment templates, you can quickly build product investment website. For example, the pharmaceutical investment industry, health care investment industry, cosmetics investment industry, agricultural investment industry, pregnancy and child investment industry, alcohol and fo...

WordPress WPS Child Themes Generator plugin <= 1.1 - Path Traversal vulnerability

Path Traversal vulnerability found by Julio Potier in WordPress WPS Child Themes Generator plugin versions = 1.1. Solution Update the WordPress WPS Child Themes Generator plugin to the latest available version at least 1.2...

DEBIAN-CVE-2019-11708

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing...

ALPINE-CVE-2019-11708

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing...