7403 matches found
The IE vulnerability is a doubling of Flash Player easy to be attack-vulnerability warning-the black bar safety net
Recently, foreign security vendor Bromium released a 2 0 1 4 annual security report, in 2 0 1 3 to 2 0 1 4 during the year, IE browser vulnerabilities to the large number doubled. At the same time, the report also analyzed the cybercriminals most commonly used vulnerabilities to attack the...
Count per Day 3.2.5 - counter.php HTTP Referer Header XSS
The Count per Day WordPress plugin was affected by a counter.php HTTP Referer Header XSS security vulnerability...
Count Per Day 3.1.1 - userperspan.php Multiple Parameter XSS
The Count per Day WordPress plugin was affected by an userperspan.php Multiple Parameter XSS security vulnerability...
Count Per Day <= 3.1 - map.php map Parameter XSS
The Count per Day WordPress plugin was affected by a map.php map Parameter XSS security vulnerability...
Count Per Day <= 3.2.3 - notes.php note Parameter XSS
The Count per Day WordPress plugin was affected by a notes.php note Parameter XSS security vulnerability...
Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access
The Count per Day WordPress plugin was affected by a download.php f Parameter Traversal Arbitrary File Access security vulnerability...
Microsoft Releases EMET 5.0 Exploit Mitigation Tool
The latest version of Microsoft’s freely available stopgap against zero-day exploits was released today with two new exploit mitigations and a batch of new configuration options. The update to Microsoft’s Enhanced Mitigation Experience Tool kit, or EMET, comes six months after a technical preview...
User Friendly SVN 'login' Cross Site Scripting Vulnerability
User Friendly SVN is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEF CON SOHOpelessly Broken Wireless Router Hacking Contest
Home and small office wireless routers are feature-rich networking devices, providing consumers and mom-and-pop shops with much more than an Internet gateway. Some, for example, have a print server function, while others store personal files—and very few are secure out of the box. Hackers and...
Threat Outbreak Alert RuleID10801: Email Messages Distributing Malicious Software on July 25, 2014
Medium Alert ID: 35047 First Published: 2014 July 25 13:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10801 may contain the following files: Name | Siz...
Exploit-Selling Firm Kept Internet Explorer Zero-Day Vulnerability Hidden for 3 Years
A French information security company VUPEN has recently disclosed that it held onto a serious Internet Explorer IE vulnerability for at least three years before revealing it at the Pwn2Own hacker competition held in March this year. The critical zero-day vulnerability affected versions 8, 9, 10...
Researchers Demonstrate Zero-Day Vulnerabilities in Tails Operating System
The critical zero-day security flaws, discovered in the privacy and security dedicated Linux-based Tails operating system by the researcher at Exodus Intelligence that could help attackers or law enforcements to de-anonymize anyone’s identity, actually lie in the I2P software that’s bundled with...
Warning — Zero-Day Vulnerabilities Identified in Tails Operating System
The critical zero-day security flaws has been discovered in the privacy and security dedicated Linux-based operating system “Tails” that could be used by an attacker to unmask your identity. Tails, which is been used and recommended by the global surveillance whistleblower Edward Snowden to remai...
VUPEN Security Research - Microsoft Windows "DirectShow" Privilege Escalation Vulnerability (Pwn2Own 2014)
VUPEN Security Research - Microsoft Windows "DirectShow" Local Privilege Escalation Vulnerability Pwn2Own 2014 Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Microsoft Windows is a series of software operating systems and graphical user...
How Russian Hackers Placed "Digital Bomb" Into the NASDAQ
Four years ago, NASDAQ servers were compromised by Russian hackers, who were somehow able to insert a "digital bomb" into the systems of NASDAQ stock exchange, which would have been able to cause several damage to the computer systems in the stock market and could bring down the entire structure ...
Apache 2.4.7 httpd mod_status Heap Buffer Overflow Vulnerability
Exploit for linux platform in category dos / poc URL: http://svn.apache.org/r1610499 Log: Merge 1610491 from trunk: SECURITY CVE-2014-0226: Fix a race condition in scoreboard handling, which could lead to a heap buffer overflow. Thanks to Marek Kroemeke working with HP's Zero Day Initiative for...
Project Zero - A Team of Star-Hackers Hired by Google to Protect the Internet
Today Google has publicly revealed its new initiative called “Project Zero,” a team of Star Hackers and Bug Hunters with the sole mission to improve security and protect the Internet. A team of superheroes in sci-fi movies protect the world from Alien attack or bad actors, likewise Project Zero i...
Announcing Project Zero
Posted by Chris Evans, Researcher Herder Security is a top priority for Google. We’ve invested a lot in making our products secure, including strong SSL encryption by default for Search, Gmail and Drive, as well as encrypting data moving between our data centers. Beyond securing our own products,...
EFF Sues NSA, ODNI Over Zero-Day Disclosure Processes
The Electronic Frontier Foundation wants a peek behind the curtain of the government’s Vulnerabilities Equities Process. The advocacy group on Tuesday filed a Freedom of Information Act FOIA lawsuit against the National Security Agency and the Office of the Director of National Intelligence hopin...
PHP-Nuke <= 8.1.0.3.5b (Downloads) Remote Blind SQL Injection
No description provided by source. !/usr/bin/perl 0-Day PHP-Nuke = 8.1.0.3.5b Downloads Remote Blind SQL Injection Date: 2010.07.04 after 50 days the bug was discovered. Author/s: Dante90, WaRWolFz Crew Crew Members: 4lasthor, Andryxxx, Cod3, Gho5t, HeRtZ, N.o.3.X, RingZero, s3rg3770, Shades...