libchewing: Heap-buffer-overflow in _Inner_InternalSpecialSymbol

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4509892513628160 Fuzzer: libFuzzerchewingrandominitfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7f6fe2738fb0 Crash State: InnerInternalSpecialSymbol...

Heap-buffer-overflow in tt_size_select

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4667213659242496 Fuzzer: libFuzzerfreetype2fuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

IRS Announces Safeguards to Protect Taxpayer Information

The Internal Revenue Service IRS has issued two news releases addressing new safeguards to protect taxpayers and strengthen authentication requirements. The electronic filing e-File PIN, an alternative signature verification tool used to assist with electronic tax filing, will no longer be...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 50 to the stable channel for Windows, Mac and Linux. Chrome 50.0.2661.75 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...

Remote Command Execution Vulnerability in ACE Information Security Filing and Adverse Information Monitoring System

ACE Mingjian Website Security Filing and Undesirable Information Detection System is a security monitoring system that integrates the three major functions of automatic website domain name collection, automatic website filing verification and automatic monitoring of undesirable information of...

FBI may have found a New Way to Unlock Shooter's iPhone without Apple

There's more coming to the high-profile Apple vs. FBI case. The Federal Bureau of Investigation FBI might not need Apple's assistance to unlock iPhone 5C that belonged to San Bernardino shooter, Syed Rizwan Farook. If you have followed the San Bernardino case closely, you probably know everything...

QNAP Systems QNAP QTS Directory Traversal Vulnerability

QNAP Systems QNAP QTS is a Turbo NAS operating system from QNAP Systems. A directory traversal vulnerability exists in QNAP Systems QNAP QTS. When AFP is enabled in the program, a remote attacker can read or write arbitrary files by submitting a special directory traversal request while accessing...

SQL Injection Vulnerability in the Key Parameters of Investment Project Filing System of Zhongshan Netizen Software Co.

Zhongshan City, the net government software limited company investment project filing system is based on modern network technology and database technology to achieve an online e-government system. There is a SQL injection vulnerability in the key parameter of the Investment Project Filing...

Missing Two-Factor Authentication Led to JPMorgan Breach

The biggest U.S. banking breach of all time came down to the smallest of details. The New York Times, citing sources close to the ongoing investigation of the JPMorgan data breach, said hackers found a server unprotected by two-factor authentication to break in using a stolen user name and passwo...

EFF Calls Out ISPs Modifying STARTTLS Encryption Commands

As Net Neutrality debates swirl, privacy advocates at the Electronic Frontier Foundation and VPN provider Golden Frog have gone public with a Federal Communications Commission filing that got more attention for accusations that Verizon FIOS customers were having their Netflix streaming service...

wireshark: DoS via excessive CPU consumption in AFP dissector (wnpa-sec-2012-17)

epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop and CPU consumption via a large number of ACL entries...

Threat Outbreak Alert: Fake Tax Filing Notice Email Messages on September 2, 2013

Medium Alert ID: 30625 First Published: 2013 September 3 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain tax filing notice for the recipient. The text in the email message attempts to convince the recipient to open...

Stable Channel Update

The Stable channel has been updated to 25.0.1364.160 for Windows, Mac, and Linux. This release contains security fixes. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date...

wireshark: DoS via excessive CPU consumption in AFP dissector (wnpa-sec-2012-17)

epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop and CPU consumption via a large number of ACL entries...

Apple Filing Protocol Info Enumerator

This module fetches AFP server information, including server name, network address, supported AFP versions, signature, machine type, and server flags. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Update: Verisign Admits To Security Breaches in 2010

Verisign, the Internet security company responsible for management of the .COM domain, told federal regulators that it was the victim of several successful attacks in 2010, but that those incidents were not reported to the company’s management until September, 2011. The news was first reported by...

Stable Channel Update

The Stable channel has been updated to 14.0.835.202 for Windows, Mac, Linux, and Chrome Frame. This release contains Adobe Flash Player 11, along with the stability and security fixes listed below. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the...

Report: Google May Face $500m Fine Over Rogue Pharma Ads

The Wall Street Journal is reporting that search giant Google is close to reaching a settlement with the U.S. Justice Department over an investigation of the company’s policy of running ads from online pharmacies that operate outside U.S. borders and in violation of U.S. law. Google has not made ...

Chrome Stable Update

The Google Chrome team is happy to announce the arrival of Chrome 11.0.696.57 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Chrome 11 contains some really great improvements including speech input through HTML. Security fixes and rewards: Please see the Chromium security page f...

OS Identification : Apple Filing Protocol

This script attempts to identify the operating system type and version by looking at the capabilities of the remote Apple Filing Protocol Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53331; scriptversion"1.13"; scriptcvsdate"Date: 2020/01/22";...