887 matches found
China Chip Hack Shines Spotlight on Hardware and Supply-Chain Risk
Recent revelations in the press regarding hardware implants and supply-chain compromise are troubling and should be seen as an opportunity to assess our current threat model and security approach. This recently revealed situation is the hardware analogue to the software supply chain compromises w...
China Chip Hack Shines Spotlight on Hardware and Supply-Chain Risk
Recent revelations in the press regarding hardware implants and supply-chain compromise are troubling and should be seen as an opportunity to assess our current threat model and security approach. This recently revealed situation is the hardware analogue to the software supply chain compromises w...
Adobe Acrobat and Reader Buffer Errors (APSB18-30: CVE-2018-12838)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Adobe Acrobat and Reader Buffer Errors (APSB18-30: CVE-2018-12855)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Adobe Acrobat and Reader Buffer Errors (APSB18-30: CVE-2018-15951)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Adobe Acrobat and Reader Double Free (APSB18-30: CVE-2018-12841)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-30: CVE-2018-15931)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-30: CVE-2018-15937)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-30: CVE-2018-15930)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Brave Software: Field Day With Protocol Handlers
Summary ===================== When launching a protocol such as mailto:, SEARCH:, or bitcoin:, Brave only asks to allow the protocol to be opened by an external application. You can select on whether or not to remember the decision or not and to allow or deny it. The issue is that upon selecting...
The Collateral Damage of Trump's Extreme Declassifications
Trump has the legal right to make public whatever documents he chooses. But he's going to cause untold damage in the process...
Vanilla: Vanilla Forums ImportController index file_exists Unserialize Remote Code Execution Vulnerability
Summary: An authenticated admin user can inject an serialized payload into a phar archive and trigger read access to it via an unprotected fileexists. An attacker can leverage this to deserialize untrusted data and gain remote code execution. Notes: - You need to have an admin account to run this...
Everything You Should Do Before You Lose Your Phone
Misplacing your smartphone—or worse, having it stolen—is awful. But you can at least minimize the damage with a few easy steps...
Google Chrome Blink Buffer Overflow Vulnerability (CNVD-2019-03614)
Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A buffer overflow vulnerability exists in Blink in versions of Google Chrome prior to 69.0.3497.81. The vulnerability can be...
Google Chrome PDFium memory misreference vulnerability (CNVD-2018-22400)
Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A memory misreference vulnerability exists in PDFium in versions prior to Google Chrome 63.0.3239.84. A remote attacker can exploit this vulnerability to cause...
Google Chrome V8 Type Obfuscation Vulnerability (CNVD-2018-22402)
Google Chrome is the United States Google Google company developed a Web browser. v8 is one of the open source JavaScript engine. A type obfuscation vulnerability exists in WebAssembly of V8 in versions prior to Google Chrome 63.0.3239.84. A remote attacker can exploit this vulnerability to cause...
Google Chrome PDFium memory misreference vulnerability (CNVD-2018-22401)
Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A memory misreference vulnerability exists in PDFium in Google Chrome prior to 63.0.3239.84. A remote attacker can exploit this vulnerability to cause heap dama...
ThreatList: Almost All Security Pros Believe Election Systems Are at Risk
As the U.S. midterm election season gets underway in earnest, concerns about the ability to hack the vote is more in the spotlight than ever. A fresh survey from Venafi has found that a full 93 percent of security pros are concerned about cyber-attacks targeting election infrastructure. The poll,...
Bitfi research receives Pwnie Award for ‘lamest vendor response’
The Pwnie Awards is an annual celebration of the achievements of security researchers and the security community. It's also an opportunity to roast vendors for lame responses to security concerns. The ceremony took place last night, August 8th, 2018 in Las Vegas at the BlackHat USA security...