FortiClient SSL-VPN 5.4 Clear Text Password Extraction

Title : Extracting clear text passwords from running processesFortiClient CVE-ID : none Product : FortiClient SSLVPN Service : FortiTray.exe Affected : =5.4 Impact : Critical Remote : No Website link : http://forticlient.com/ Reported : 31/08/2016 Authors : Viktor Minin https://1-33-7.com Alexand...

Tonight Mr. Robot is Going to Reveal ‘Dream Device For Hackers’

Mr. Robot is the rare show that provides a realistic depiction of hacks and vulnerabilities that are at the forefront of cyber security. This is the reason it’s been the most popular TV show of its kind. Throughout season 1 and season 2, we have seen that connected devices are the entry point of...

China Telecom WingPay Android client gesture lock has design flaws

Wing Pay is a mobile payment service launched by China Telecom. A design vulnerability exists in the gesture lock of the Wing Pay Android client. By exploiting the vulnerability, an attacker can bypass the gesture lock security mechanism of the Wing Pay Android client and obtain users' private...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the drivers/video/msm/mdss/mdssmdppp.c file of Qualcomm’s Android operating system is related to an incorrect determination of the data size of the Gamut LUT. Exploiting this vulnerability can allow a remote attacker to obtain confidential information through a specially...

Cisco repair Shadow Brokers announced the vulnerability and released technical analysis-vulnerability warning-the black bar safety net

A, event summary 2 0 1 6 years 8 on 1 5 December, a named“The Shadow Brokers”the shadow broker-hacking group claims to Own the intrusion of the Equation Group equation organization of hacking an organization's computer system, and successfully steal a lot of confidential information and hacker...

Operation Ghoul Targeting Middle Eastern Industrial, Engineering Organizations

Researchers today identified a series of ongoing targeted attacks primarily designed to steal sensitive corporate financial data from industrial and engineering organizations in the Middle East. The group behind the campaign, nicknamed Operation Ghoul by researchers at Kaspersky Lab’s Global...

IBM FileNet Workplace Phishing Attack Vulnerability

IBM FileNet is the enterprise content management platform of IBM Corporation of the U.S.A. IBM FileNet Workplace is one of the set of client-side Web applications that provide access to document management and business process management. A phishing attack vulnerability exists in IBM FileNet...

SQL Injection Vulnerability in the Remote Consultation System of Beijing Blue Weather Technology Co.

BlueWell is a high-tech enterprise specializing in providing telemedicine services, and has constructed a nationwide telemedicine service platform, realizing a system platform for teleconsultation, specialist diagnosis, remote monitoring, surgical demonstration, two-way referral, remote education...

Same-origin policy violation using local HTML file and saved shortcut file — Mozilla

Security researcher Abdulrahman Alqabandi reported that when a local HTML file resides in the same directory as a malicious local shortcut file, the shortcut can be called by the local page to allow the page to read the contents of local files or directories or to load an arbitrary website in...

Multiple vulnerabilities in the Huge-IT Image Gallery extension for Joomla!

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other features . Huge-IT Image Gallery is one of the image gallery extension plug-ins . A SQL injection vulnerability and a cross-site scripti...

BitTorrent Cross-Site Scripting Vulnerability

BitTorrent is a set of peer-to-peer file uploading and downloading software based on the BitTorrent protocol. BitTorrent suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

BMW in-car infotainment system ConnectedDrive aeration remote control 0day vulnerabilities-vulnerability warning-the black bar safety net

! ConnectedDrives is the BMW car infotainment system, The system can move the APP to manage the vehicle. In addition to the APP, the system also provides a complete Web application. Vulnerability lab security researcher BenjaminKunz Mejri in to the BMW official submission of a vulnerability five...

CloudBees Jenkins has multiple vulnerabilities (CNVD-2016-04833)

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . HTML...

Hackers Can Steal Your ATM PIN from Your Smartwatch Or Fitness Tracker

As your day-to-day apparel and accessories are turning into networked mobile electronic devices that attach to your body like smartwatch or fitness band, the threat to our personal data these devices collect has risen exponentially. A recent study from Binghamton University also suggests your...

CVE-2016-3988

Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allow remote...

CVE-2016-3962

Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote attacker...

Dozens of Malicious Apps on Play Store can Root & Hack 90% of Android Devices

It's not at all surprising that the Google Play Store is surrounded by a large number of malicious apps that has the ability to gain users' attention into falling victim for one, but this time, it is even worse than most people realize. Researchers at Trend Micro have detected a family of malicio...

SSHC 5.0 Encrypted Database Content Stealing

Exploit Title: SSHC v5.0 encrypted database content stealing Date: 03/06/2016 Author: Mickael Dorigny @ Synetis Vendor or Software Link: https://github.com/e2ma3n/sshc Version: 0.5 Category: data theft SSHC description : ====================================================================== When...

Android Ransomware now targets your Smart TV, Too!

Do you own a Smartwatch, Smart TV, Smart fridge, or any Internet-connected smart device? If your answer is yes, then you need to know the latest interest of the cyber criminals in the field of Internet of Things. Ransomware! After targeting hospitals, universities, and businesses, Ransomware has...

Google Chrome PDFium Out-of-Bounds Read Vulnerability (CNVD-2016-03815)

Google Chrome is a popular web browser. Google Chrome PDFium suffers from an out-of-bounds read vulnerability, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by the user and can be used to obtain sensitive information...