iCloud Phishing Campaign Zycode Back From the Dead

A phishing campaign aimed at Chinese Apple users that was thought to be in hibernation has been roused from its slumber. Researchers in June spotted the campaign, dubbed Zycode, targeting Apple iCloud users. A rash of suspended domains that month led to a lull for the campaign however; researcher...

[SECURITY] [DLA 658-1] icedove security update

Package : icedove Version : 45.4.0-1deb7u1 CVE ID : CVE-2016-5278, CVE-2016-5270, CVE-2016-5272, CVE-2016-5276, CVE-2016-5277, CVE-2016-5280, CVE-2016-5281, CVE-2016-5284, CVE-2016-5250, CVE-2016-5261, CVE-2016-5257 Multiple security issues have been found in Icedove, Debians version of the Mozil...

DLA-658-1 icedove - security update

Bulletin has no description...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or execute arbitrary code in privileged contexts.

The vulnerability of the IOAcceleratorFamily component in iOS and Mac OS X operating systems is related to pointer dereferencing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged contexts or trigger a service failure dereferencing the null...

The vulnerability of the Mac OS X operating system, which allows a hacker to bypass the Taint-mode security mechanism

The vulnerability of the Perl component of the Mac OS X operating system is related to security configuration errors. Exploiting this vulnerability allows a local attacker to bypass the Taint-mode protection mechanism by using a specially created environment variable...

MS16-127: Security Update for Adobe Flash Player (3194343)

The remote Windows host is missing KB3194343. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 - Multiple use-after-free errors exist that allow an unauthenticated,...

Turkey Blocks GitHub, Google Drive and Dropbox to Censor RedHack Leaks

Turkey is again in the news for banning online services, and this time, it's a bunch of sites and services offered by big technology giants. Turkey government has reportedly blocked access to cloud storage services including Microsoft OneDrive, Dropbox, and Google Drive, as well as the code hosti...

Mozilla Firefox ESR < 45.4 Multiple Vulnerabilities

Binary data 9623.prm...

Framework: denial-of-service attack with XML input

A denial of service flaw was found in the way Spring processes inline DTD declarations. A remote attacker could submit a specially crafted XML file that would cause out-of-memory errors when parsed...

DSA-3686-1 icedove - security update

Bulletin has no description...

DLA-640-1 icedove - security update

Bulletin has no description...

[SECURITY] [DLA 636-1] firefox-esr security update

Package : firefox-esr Version : 45.4.0esr-1deb7u1 CVE ID : CVE-2016-5250 CVE-2016-5257 CVE-2016-5261 CVE-2016-5270 CVE-2016-5272 CVE-2016-5274 CVE-2016-5276 CVE-2016-5277 CVE-2016-5278 CVE-2016-5280 CVE-2016-5281 CVE-2016-5284 Multiple security issues have been found in the Mozilla Firefox web...

DLA-636-1 firefox-esr - security update

Bulletin has no description...

[SECURITY] [DSA 3674-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3674-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 22, 2016 https://www.debian.org/security/faq -...

DSA-3674-1 firefox-esr - security update

Bulletin has no description...

The vulnerability of the Windows operating system, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the Graphics Device Interface GDI component in the Windows operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially created application...

Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing intruders to obtain confidential information

The vulnerability of Internet Explorer and Microsoft Edge relates to errors in requests between different sources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information through a specially crafted website...

Debian: Security Advisory (DSA-3674-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Mac OS X operating system, which allows a hacker to trigger a service failure

Vulnerability of the Mac OS X system’s startup process due to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure using undefined vectors...

Receiver for Android Connects to Default StoreFront WebUI

When adding account using Receiver for Android 3.9.1 and accessing StoreFront using NetScaler Gateway, setting defaults to StoreFront Web UI instead of showing list of apps in the Receiver app. It opens a webpage to sign into Receiver for Web. When changing type to XenApp Services or NetScaler...