CVE-2014-8832

The indexing functionality in Spotlight in Apple OS X before 10.10.2 writes memory contents to an external hard drive, which allows local users to obtain sensitive information by reading from this drive...

Design/Logic Flaw

The indexing functionality in Spotlight in Apple OS X before 10.10.2 writes memory contents to an external hard drive, which allows local users to obtain sensitive information by reading from this drive...

CVE-2014-8832

The CVE-2014-8832 issue affects Spotlight indexing on Apple OS X prior to 10.10.2, where memory contents could be written to an external hard drive, enabling local users to read sensitive data from that drive. The vulnerability is tied to Spotlight’s indexing flow and memory handling. The documen...

CVE-2014-8832

The indexing functionality in Spotlight in Apple OS X before 10.10.2 writes memory contents to an external hard drive, which allows local users to obtain sensitive information by reading from this drive...

Vulnerability alert: Flash Exposure of serious security vulnerabilities, affecting all versions of Windows System, IE and FireFox browsers-bug warning-the black bar safety net

Last week for Adobe, it should be a busy week, although the vulnerability for Adobe to say already is commonplace, but you can remotely execute malicious code, access the system control of high-risk vulnerability does not see more. Critical: remote code execution vulnerability On Tuesday, Adobe...

MGASA-2015-0043 Updated flash-player-plugin packages fix security vulnerabilities

Adobe Flash Player 11.2.202.440 contains fixes to critical security vulnerabilities found in earlier versions that could cause a crash and potentially allow an attacker to take control of the affected system. Adobe reports that CVE-2015-0311 is already being actively exploited in the wild via...

Analysis of Flash Zero Day Shows Layers of Obfuscation

The Flash zero day that made its way into the Angler exploit kit was wrapped in multiple layers of obfuscation and has the ability to inject its malicious payload straight into users’ browsers. In the last week, since the news broke of the Adobe Flash zero-day flaw appearing in the Angler kit,...

FreeBSD : Adobe Flash Player -- critical vulnerability (37a87ade-a59f-11e4-958e-0011d823eebd)

Adobe reports : Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system. We are aware of reports that this vulnerability is being actively exploited in the wild via drive-by-download attacks against systems running Internet Explorer and...

CapTipper - Malicious HTTP traffic explorer tool

CapTipper is a python tool to analyze, explore and revive HTTP malicious traffic. CapTipper sets up a web server that acts exactly as the server in the PCAP file, and contains internal tools, with a powerful interactive console, for analysis and inspection of the hosts, objects and conversations...

Adobe Auto-Update Flash Player Zero Day Patch

Adobe on Saturday began patching a zero-day vulnerability in Flash Player, exploits for which have been included in the notorious Angler Exploit Kit. This is the second of two previously unreported critical flaws in the software that have been patched in the last five days. Adobe last Thursday se...

Adobe patches 2nd Flash Player Zero-day Vulnerability

Ready to patch your Adobe Flash software now. Adobe has patched one after one two zero-day vulnerabilities in its Adobe Flash that are being actively exploited by the cyber criminals. PATCH FOR FIRST ZERO-DAY On Thursday, the company released an emergency update for one of the critical...

Adobe Flash Player -- critical vulnerability

Adobe reports: Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system. We are aware of reports that this vulnerability is being actively exploited in the wild via drive-by-download attacks against systems running Internet Explorer and...

Two XSS vulnerabilities in Simple Security WordPress Plugin

Advisory ID: HTB23244 Product: Simple Security WordPress Plugin Vendor: MyWebsiteAdvisor Vulnerable Versions: 1.1.5 and probably prior Tested Version: 1.1.5 Advisory Publication: December 17, 2014 without technical details Vendor Notification: December 17, 2014 Public Disclosure: January 14, 2015...

WordPress Simple Security 1.1.5 Cross Site Scripting Vulnerability

WordPress Simple Security plugin version 1.1.5 suffers from a cross site scripting vulnerability. Product: Simple Security WordPress Plugin Vendor: MyWebsiteAdvisor Vulnerable Versions: 1.1.5 and probably prior Tested Version: 1.1.5 Advisory Publication: December 17, 2014 without technical detail...

Two XSS Vulnerabilities in SupportCenter Plus

High-Tech Bridge Security Research Lab discovered two XSS vulnerabilities in a web-based customer support software SupportCenter Plus. These vulnerabilities can be exploited to perform Cross-Site Scripting attacks against authenticated users of the vulnerable software. 1 Cross-Site Scripting XSS ...

Two XSS vulnerabilities in Simple Security WordPress Plugin

High-Tech Bridge Security Research Lab discovered two XSS vulnerabilities in Simple Security WordPress plugin, which can be exploited to perform Cross-Site Scripting attacks against administrators of WP websites with the vulnerable plugin. 1 Two Cross-Site Scripting XSS Vulnerabilities in Simple...

JourneyMap 5.0.0RC2 Ultimate Edition - DoS

Exploit for multiple platform in category dos / poc Exploit Title: JourneyMap Disk-space consumption exploit Date: 23Nov2014 Exploit Author: CovertCodes Vendor Homepage: http://journeymap.techbrew.net/ Software Link: http://journeymap.techbrew.net/download/ Version: 5.0.0RC2 Ultimate Edition Test...

Multiple vulnerabilities in MantisBT

High-Tech Bridge Security Research Lab has discovered multiple vulnerabilities in MantisBT, which can be exploited to perform Cross-Site Scripting XSS and SQL injection attacks. Improper access control vulnerability discloses database's credentials login and password in plaintext. 1 Cross-Site...

Tape Inventory With: "Unknown media (possibly in use by another application)."

Challenge A tape inventory or catalog operation fails with the following error: Cannot inventory tape in Drive 1 Server: , Library: , Drive ID: TapeX. Unknown media possibly in use by another application. Cause This error is shown when Veeam Backup & Replication does not recognize the MTF header ...

JourneyMap 5.0.0RC2 Ultimate Edition - Resource Consumption (Denial of Service)

JourneyMap 5.0.0RC2 Ultimate Edition - Resource Consumption Denial of Service Exploit Title: JourneyMap Disk-space consumption exploit Date: 23Nov2014 Exploit Author: CovertCodes Vendor Homepage: http://journeymap.techbrew.net/ Software Link: http://journeymap.techbrew.net/download/ Version:...