Everything You Should Do Before You Lose Your Phone

Misplacing your smartphone—or worse, having it stolen—is awful. But you can at least minimize the damage with a few easy steps...

Google Chrome Blink Buffer Overflow Vulnerability (CNVD-2019-03614)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A buffer overflow vulnerability exists in Blink in versions of Google Chrome prior to 69.0.3497.81. The vulnerability can be...

Google Chrome PDFium memory misreference vulnerability (CNVD-2018-22400)

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A memory misreference vulnerability exists in PDFium in versions prior to Google Chrome 63.0.3239.84. A remote attacker can exploit this vulnerability to cause...

Google Chrome V8 Type Obfuscation Vulnerability (CNVD-2018-22402)

Google Chrome is the United States Google Google company developed a Web browser. v8 is one of the open source JavaScript engine. A type obfuscation vulnerability exists in WebAssembly of V8 in versions prior to Google Chrome 63.0.3239.84. A remote attacker can exploit this vulnerability to cause...

Google Chrome PDFium memory misreference vulnerability (CNVD-2018-22401)

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A memory misreference vulnerability exists in PDFium in Google Chrome prior to 63.0.3239.84. A remote attacker can exploit this vulnerability to cause heap dama...

ThreatList: Almost All Security Pros Believe Election Systems Are at Risk

As the U.S. midterm election season gets underway in earnest, concerns about the ability to hack the vote is more in the spotlight than ever. A fresh survey from Venafi has found that a full 93 percent of security pros are concerned about cyber-attacks targeting election infrastructure. The poll,...

Bitfi research receives Pwnie Award for ‘lamest vendor response’

The Pwnie Awards is an annual celebration of the achievements of security researchers and the security community. It's also an opportunity to roast vendors for lame responses to security concerns. The ceremony took place last night, August 8th, 2018 in Las Vegas at the BlackHat USA security...

Google Chrome V8 kind confusion

A vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Vulnerability Spotlight: Multiple Vulnerabilities in Samsung SmartThings Hub

These vulnerabilities were discovered by Claudio Bozzato of Cisco Talos. Executive Summary Cisco Talos recently discovered several vulnerabilities present within the firmware of the Samsung SmartThings Hub. In accordance with our coordinated disclosure policy, Cisco Talos has worked with Samsung ...

Staying Safe in the Era of Browser-based Cryptocurrency Mining

Qualys Malware Research Labs is announcing the release of Qualys BrowserCheck CoinBlocker Chrome extension to detect and block browser-based cryptocurrency mining, aka cryptojacking. Cryptojacking Cryptojacking attacks leverage the victim system’s resources via malicious JavaScript to mine certai...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-21: CVE-2018-5012)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-21: CVE-2018-5030)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Buffer Errors (APSB18-21: CVE-2018-5034)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Buffer Errors (APSB18-21: CVE-2018-5043)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Buffer Errors (APSB18-21: CVE-2018-5037)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Oracle Web Cache Unspecified Client Request Handling DoS - Ver2

A vulnerability exists in Oracle Web Cache. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

D-Link DAP-1160 Unauthenticated Remote Configuration Remote Reboot - Ver2

A vulnerability exists in D-Link DAP-1160. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Fuzzer SMB Negotiate Multiple Requests - Ver2

A vulnerability exists in Fuzzer:. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Fuzzer SMB Tree Connect Server Name - Ver2

A vulnerability exists in Fuzzer:. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

QNAP QTS VPNFilter Malware (NAS-201805-24)

QNAP QTS might be affected against the VPNFilter malware. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; if descripti...