BitTorrent Cross-Site Scripting Vulnerability

BitTorrent is a set of peer-to-peer file uploading and downloading software based on the BitTorrent protocol. BitTorrent suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

CloudBees Jenkins has multiple vulnerabilities (CNVD-2016-04833)

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . HTML...

BMW in-car infotainment system ConnectedDrive aeration remote control 0day vulnerabilities-vulnerability warning-the black bar safety net

! ConnectedDrives is the BMW car infotainment system, The system can move the APP to manage the vehicle. In addition to the APP, the system also provides a complete Web application. Vulnerability lab security researcher BenjaminKunz Mejri in to the BMW official submission of a vulnerability five...

Hackers Can Steal Your ATM PIN from Your Smartwatch Or Fitness Tracker

As your day-to-day apparel and accessories are turning into networked mobile electronic devices that attach to your body like smartwatch or fitness band, the threat to our personal data these devices collect has risen exponentially. A recent study from Binghamton University also suggests your...

CVE-2016-3988

Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allow remote...

CVE-2016-3962

Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote attacker...

Dozens of Malicious Apps on Play Store can Root & Hack 90% of Android Devices

It's not at all surprising that the Google Play Store is surrounded by a large number of malicious apps that has the ability to gain users' attention into falling victim for one, but this time, it is even worse than most people realize. Researchers at Trend Micro have detected a family of malicio...

SSHC 5.0 Encrypted Database Content Stealing

Exploit Title: SSHC v5.0 encrypted database content stealing Date: 03/06/2016 Author: Mickael Dorigny @ Synetis Vendor or Software Link: https://github.com/e2ma3n/sshc Version: 0.5 Category: data theft SSHC description : ====================================================================== When...

Android Ransomware now targets your Smart TV, Too!

Do you own a Smartwatch, Smart TV, Smart fridge, or any Internet-connected smart device? If your answer is yes, then you need to know the latest interest of the cyber criminals in the field of Internet of Things. Ransomware! After targeting hospitals, universities, and businesses, Ransomware has...

Google Chrome PDFium Out-of-Bounds Read Vulnerability (CNVD-2016-03815)

Google Chrome is a popular web browser. Google Chrome PDFium suffers from an out-of-bounds read vulnerability, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by the user and can be used to obtain sensitive information...

Has Your TeamViewer Account Been Hacked? Here's What to Do Immediately

Do you have remote login software TeamViewer installed on your desktop? If Yes, then it could be possible that your system can be accessed by attackers to steal your personal details, including your bank and PayPal accounts, as several reports on Reddit and Twitter suggests. According to recent...

CVE-2016-4454

The vmsvgafiforeadraw function in hw/display/vmwarevga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service QEMU process crash by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read...

Multiple Vulnerabilities in HPE Matrix Operating Environment and Systems Insight Manager

HPE Matrix Operating Environment is a set of cloud management software designed for infrastructure services.HPE Systems Insight Manager is a set of management software for HP servers and storage devices, which provides multi-system management, fault management and event handling, and rights...

Multiple vulnerabilities in HPE Matrix Operating Environment and Systems Insight Manager (CNVD-2016-03740)

HPE Matrix Operating Environment is a set of cloud management software designed for infrastructure services.HPE Systems Insight Manager is a set of management software for HP servers and storage devices, which provides multi-system management, fault management and event handling, and rights...

Beware of Fake USB Chargers that Wirelessly Record Everything You Type, FBI warns

Last year, a white hat hacker developed a cheap Arduino-based device that looked and functioned just like a generic USB mobile charger, but covertly logged, decrypted and reported back all keystrokes from Microsoft wireless keyboards. Dubbed KeySweeper, the device included a web-based tool for li...

WordPress Fastest Cache Plugin <= 0.8.5.7 - Local File Inclusion

This plugin is prone to a local file inclusion vulnerability. It allows attackers to execute code on the target web server or on a site visitor’s browser. Then they can steal data or perform a denial of service attacks. Solution Update the plugin...

Mozilla Thunderbird < 60.7 Multiple Vulnerabilities

Binary data 700742.prm...

Hacker Arrested after Exposing Flaws in Elections Site

A security researcher responsibly disclosed vulnerabilities in the poorly secured web domains of a Florida county elections, but he ended up in handcuffs on criminal hacking charges and jailed for six hours Wednesday. Security researcher David Michael Levin, 31, of Estero, Florida was charged wit...

Identity Thieves Used Leaked PII to Steal ADP Payroll Info

Cybercriminals accessed a W-2 portal maintained by payroll company ADP recently to glean sensitive information about employees at a handful of companies. The company is stressing that the company itself wasn’t hacked, but that it appears identity thieves may have been able to create ADP accounts ...

Ubuntu 16.04 LTS : ubuntu-core-launcher vulnerability (USN-2956-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2956-1 advisory. Zygmunt Krynicki discovered that ubuntu-core-launcher did not properly sanitize its input and contained a logic error when determining the mountpoint of bind moun...