Flaws in Emergency Alert System Hardware Allow Remote Login, Zombie Alert Insertion

There are a set of easily exploited vulnerabilities in the appliances used in the emergency alert system EAS that could be used by attackers to log in to these boxes remotely and send fake emergency alerts like the one that interrupted a TV broadcast in Montana on Monday. The vulnerabilities...

Collisions in PDF signatures

Note: This advisory can also be found at http://pdfsig-collision.florz.de/ = Summary = The specification of the Portable Document Format PDF from version 1.3 onward, including ISO 19005-1:2005 PDF/A-1 and ISO 32000-1:2008 equivalent to PDF 1.7, ostensibly defines a mechanism for digitally signing...