Fast and Full Featured SSL Scanner: SSLyze

SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify mis-configurations affecting their SSL servers. SSLyze is all Python code but it uses an OpenSSL wrapper...

Lenovo eggplant fast pass（Lenovo ShareIT is exposed to many vulnerabilities-vulnerability warning-the black bar safety net

Lenovo ShareIT（eggplant fast pass service is proof there is a hard-coded password, information leakage, sensitive information is not encrypted, unauthorized vulnerability, bug submitter from Core Security Consulting team the security researcher Ivan Huertas, this report from the same team of...

Repeated snapshot consolidation requests on VM by Snapshot Hunter

Article Applicability This article specifically applies to a situation where a VM was created using a third-party VDI, fast-provisioning application, or PowerCLI with the -LinkedClone parameter. Challenge Shortly after a backup or replication job runs, multiple Consolidate Snapshot operations are...

Google to Speed Up Chrome for Fast Internet Browsing

Google is planning to make Chrome faster in order to provide its users fast Internet browsing experience. Thanks to a new, open-source data and web compression algorithm for the Internet called Brotli, which Google announced last year to boost its web page performance. With Brotli, Google will...

Trello: DOM based XSS via Wistia embedding

Hi, You are using Wistia to embed video at trello.com. However external script from fast.wistia.com vulnerable to XSS and allows to run malicious javascript on your side. vulnerable code: fast.wistia.net/assets/external/E-v1.js I found that parameter wchannel can be controled to load js from...

Tequila File Hosting 1.5 Cross Site Scripting

================================================================================ Tequila File Hosting Coss Site Scripting ================================================================================ Vendor Homepage: http://codecanyon.net/item/tequila-file-hosting-script/7604312 Date: 16/12/20...

[SECURITY] Fedora 22 Update: php-twig-1.23.1-2.fc22

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...

[SECURITY] Fedora 23 Update: php-twig-1.23.1-2.fc23

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...

[SECURITY] Fedora 22 Update: python-pycurl-7.19.5.1-3.fc22

PycURL is a Python interface to libcurl. PycURL can be used to fetch objects identified by a URL from a Python program, similar to the urllib Python module. PycURL is mature, very fast, and supports a lot of features...

Li-Fi is 100 times Faster than Wi-Fi Technology: Real-World Tests Prove

Yes, it's time to shift from Wi-Fi to Li-Fi — an alternative technology that is 100 times faster than the average speeds of Wi-Fi. Scientists have just field-tested the new wireless technology called Li-Fi for the first time and achieved marvelous wireless speeds that are 100 times faster than...

CVE-2006-0459

flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...

Windows Drivers are True’ly Tricky

Posted by James Forshaw, Driving for Bugs Auditing a product for security vulnerabilities can be a difficult challenge, and there’s no guarantee you’ll catch all vulnerabilities even when you do. This post describes an issue I identified in the Windows Driver code for Truecrypt, which has already...

ZeroNet - Decentralized websites using Bitcoin crypto and BitTorrent network

Decentralized websites using Bitcoin crypto and the BitTorrent network - http://zeronet.io Why? We believe in open, free, and uncensored network and communication. No single point of failure: Site remains online so long as at least 1 peer serving it. No hosting costs: Sites are served by visitors...

Oracle: Security Advisory (ELSA-2014-1652)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

lulus.com XSS vulnerability

Vulnerable URL: https://www.lulus.com/categories/1690/going-fast.html?x" style=background:black; onmouseover=alertString.fromCharCode88,83,83,80,79,83,69,68 " Details: Description| Value ---|--- Patched:| Yes, at 28.10.2016 Latest check for patch:| 28.10.2016 06:40 GMT Vulnerability type:| XSS...

Contactless Fingerprint Scanner That Can Capture Your Prints from Meters Away

Until today, there existed such Fingerprint Biometric Readers that required your touch to authenticate yourself as an authorized person. However, the latest research shows that the future of fingerprint scanners lies in a "no-touch" activity by an individual for gaining access. Recently, NIST...

Amazon Linux: Security Advisory (ALAS-2011-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2019-7498

Name of the Vulnerable Software and Affected Versions Fast Secure Contact Form plugin versions prior to 4.0.38 Description The issue allows for XSS, specifically through the fs contact form1welcome parameter. Recommendations For versions prior to 4.0.38, update to version 4.0.38 or later to resol...

[SECURITY] Fedora 23 Update: rubygem-sup-0.21.0-3.fc23

Sup is a console-based email client for people with a lot of email. It supports tagging, very fast full-text search, automatic contact-list management, and more. If you're the type of person who treats email as an extension of your long-term memory, Sup is for you. Sup makes it easy to: - Handle...

Droopescan - Scanner to identify issues with several CMSs, mainly Drupal & Silverstripe

A plugin-based scanner that aids security researchers in identifying issues with several CMS: Drupal. SilverStripe. Partial functionality for: Wordpress. Joomla. computer:/droopescan$ droopescan scan drupal -u http://example.org/ -t 8 + No themes found. + Possible interesting urls found: Default...