The Quick vs. the Strong: Commentary on Cory Doctorow's Walkaway

Technological advances change the world. That's partly because of what they are, but even more because of the social changes they enable. New technologies upend power balances. They give groups new capabilities, increased effectiveness, and new defenses. The Internet decades have been a...

Microsoft Dynamics CRM 2011 Update Rollup 17

Microsoft Dynamics CRM 2011 Update Rollup 17 INTRODUCTION Update Rollup 17 for Microsoft Dynamics CRM 2011 is available. This article describes the hotfixes and updates that are included in this update rollup. This update rollup is available for all languages that are supported by Microsoft...

Microsoft Dynamics CRM 2011 Update Rollup 18

Microsoft Dynamics CRM 2011 Update Rollup 18 INTRODUCTION Update Rollup 18 for Microsoft Dynamics CRM 2011 is available. This article describes the hotfixes and updates that are included in this update rollup. This update rollup is available for all languages that are supported by Microsoft...

Microsoft Dynamics CRM 2011 Update Rollup 15

Microsoft Dynamics CRM 2011 Update Rollup 15 We have identified a compatibility issue that occurs when you use the Microsoft Dynamics CRM 2011 Client for Outlook with Update Rollup 15 applied against a Dynamics CRM 2013 server. This issue does not affect Dynamics CRM 2011 servers. A new Update...

Microsoft Dynamics AX DoS

Microsoft Dynamics AX software contains a vulnerability related to the incorrect processing of specially crafted messages in the AOS format, which can lead to service failure...

[SECURITY] Fedora 21 Update: ProDy-1.7.1-1.fc21

ProDy is a free and open-source Python package for protein structure, dynam ics, and sequence analysis. It allows for comparative analysis and modeling of protein structural dynamics and sequence co-evolution. Fast and flexible P roDy API is for interactive usage as well as application developmen...

[SECURITY] Fedora 22 Update: ProDy-1.7.1-1.fc22

ProDy is a free and open-source Python package for protein structure, dynam ics, and sequence analysis. It allows for comparative analysis and modeling of protein structural dynamics and sequence co-evolution. Fast and flexible P roDy API is for interactive usage as well as application developmen...

[SECURITY] Fedora 23 Update: ProDy-1.7.1-1.fc23

ProDy is a free and open-source Python package for protein structure, dynam ics, and sequence analysis. It allows for comparative analysis and modeling of protein structural dynamics and sequence co-evolution. Fast and flexible P roDy API is for interactive usage as well as application developmen...

Good Technology Authentication Insecure Coupling

---------------------------------------------------------------- v1 - modzero Security Advisory: Insecure application-coupling in Good Authentication Delegation MZ-15-03 ---------------------------------------------------------------------...

Microsoft SharePoint Server Excel Viewer Remote Code Execution Vulnerability (3072620)

This host is missing an important security update according to Microsoft Bulletin MS15-070. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

New Technique Complicates Mutex Malware Analysis

Malware analysts have had a measure of success using static mutex values as a fingerprint for detecting and blocking malicious code. These values are used in programming to enable software to synchronize communication between multiple threads or processes, or to determine whether another instance...

Microsoft Dynamics CRM Cross-Site Scripting Vulnerability

Microsoft Dynamics CRM is a fully integrated customer relationship management CRM system. A cross-site scripting vulnerability exists in Microsoft Dynamics CRM 2013 SP1. Because the script passed to "/Biz/Users/AddUsers/SelectUsersPage.aspx" fails to adequately filter user-supplied input, a remot...

Microsoft Dynamics CRM 2013 SP1 Cross Site Scripting Vulnerability

Microsoft Dynamics CRM 2013 SP1 suffers from self-inflicted cross site scripting vulnerability. Product: Microsoft Dynamics CRM 2013 SP1 Vendor: Microsoft Corporation Vulnerable Versions: 6.1.1.132 DB 6.1.1.132 and probably prior Tested Version: 6.1.1.132 DB 6.1.1.132 Advisory Publication: Decemb...

Microsoft Dynamics CRM 2013 SP1 Cross Site Scripting

Advisory ID: HTB23245 Product: Microsoft Dynamics CRM 2013 SP1 Vendor: Microsoft Corporation Vulnerable Versions: 6.1.1.132 DB 6.1.1.132 and probably prior Tested Version: 6.1.1.132 DB 6.1.1.132 Advisory Publication: December 29, 2014 without technical details Vendor Notification: December 29, 20...

Self-XSS in Microsoft Dynamics CRM 2013 SP1

High-Tech Bridge Security Research Lab discovered a DOM-based self-XSS vulnerability in Microsoft Dynamics CRM 2013 SP1, which can be exploited to perform Cross-Site Scripting attacks against authenticated users. The vulnerability exists due to insufficient filtration of user-supplied input passe...

Data Dynamics ActiveBar ActiveX (actbar3.ocx <= 3.1) Insecure Methods

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol--------------------------------------------------------------------------------------- bData Dynamics ActiveBar ActiveX Control actbar3.ocx = 3.1 Multiple Inscure Methods/b url:...

Data Dynamics ActiveReport ActiveX (actrpt2.dll <= 2.5) Inscure Method

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------------------------- bData Dynamics ActiveReport ActiveX Control actrpt2.dll = 2.5 SaveLayout Inscure Method/b url:...

reSIProcate 1.3.2 - Remote Denial of Service PoC

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS in reSIProcate MU-200807-01 July 10, 2008 http://labs.mudynamics.com/advisories.html Affected Products/Versions: repro SIP proxy/registrar 1.3.2 http://www.resiprocate.org/ReSIProcate1.3.2Release Any produ...

Crypto Model Based on Human Cardiorespiratory Coupling

A novel and theoretical encryption scheme inspired by new insights into the way that the human heart and lungs communicate is said to be substantially different than existing crypto-methods and highly resistant to conventional attacks. The research was undertaken and published by Professors...

Antimalware Support for Windows XP and the January 2014 Security Bulletin Webcast and Q&A

Today we’re publishing the January 2014 Security Bulletin Webcast Questions & Answers page. We answered 16 questions in total, with the majority of questions focusing on the Dynamics AX bulletin MS14-004, the update for Microsoft Word MS14-001 and the re-release of the Windows 7 and Windows Serve...