Design Flaws Make Drones Vulnerable to Cyber-Attacks

In the past, The Hacker News THN reported about various activities surrounding Drones. Whether it was the development of the first backdoor for drones MalDrone, or Weaponized drones getting legal, or Drones hacking smartphones. And now the reports depict... Security Researcher has showcased a...

MGASA-2015-0389 Updated chromium-browser packages fix security vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities: Two flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to bypass cross origin restrictions, and access or modify data from an unrelated web site...

Gentoo Security Advisory GLSA 201410-01

Gentoo Linux Local Security Checks GLSA 201410-01 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

The vulnerability of the libvdpau library, which allows a hacker to elevate their privileges

The vulnerability of the libvdpau library is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker, operating locally, to enhance their privileges by manipulating the VDPAUDRIVERPATH variable...

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, allowing attackers to execute arbitrary code or trigger service failures

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause a denial-of-service attack using a specially crafted website...

The vulnerability of the Windows operating system, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially crafted application...

Adobe Releases 23 Security Updates for Flash Player

Adobe has released an important security bulletin that addresses a total of 23 Critical vulnerabilities in Adobe Flash Player. The security fixes for Windows, Linux and Mac users address "critical flaws that could potentially allow attackers to take control of the affected system," the company...

UBUNTU-CVE-2015-4500

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

CVE-2014-3701

eDeploy has tmp file race condition flaws...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Updated kernel-rt packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, whic...

ISC BIND 9.0.x < 9.9.7-P3 / 9.10.x < 9.10.2-P4 Multiple DoS

According to its self-reported version number, the installation of ISC BIND running on the remote name server is potentially affected by the following vulnerabilities : - A denial of service vulnerability exists due to an assertion flaw that is triggered when parsing malformed DNSSEC keys. An...

Pair of Drupal Modules Patch Access Bypass Flaws

A pair of modules included in the Drupal content management system have been updated to fix access bypass vulnerabilities that could allow an attacker to take actions on the behalf of some users. One of the modules fixed is the Twitter module, which allows users to take a variety of actions,...

Microsoft Lync Server Multiple Vulnerabilities (3089952)

This host is missing an important security update according to Microsoft Bulletin MS15-104. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

The vulnerability of the Business Process Manager system allows a perpetrator to circumvent existing access restrictions.

The vulnerability of the REST API interface of the Business Process Manager system is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions remotely...

The vulnerability of the Business Process Manager system allows a perpetrator to circumvent existing access restrictions and execute arbitrary Java scripts.

The vulnerability of the REST API interface of the Business Process Manager system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and execute arbitrary Java scripts using a specially crafted API request...

The vulnerability of the Luna HSM encryption hardware system, which allows a perpetrator to gain access to user data

The vulnerability of the Luna HSM encryption hardware system is due to problems with the implementation of cryptography. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user data...

The vulnerability of the iOS operating system, which allows a hacker to circumvent access restrictions to file system objects

The vulnerability of the AppleFileConduit component in the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass access restrictions to file system objects by manipulating symbolic links...

The vulnerability of the iOS operating system, which allows a hacker to trigger a service failure

The vulnerability of the Safari component in the iOS operating system is related to improper data handling. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially crafted URL, due to the lack of restrictions on the number of JavaScript notifications...

The vulnerability of the Oracle E-Business Suite system for automating business processes allows a perpetrator to compromise the integrity of information.

The vulnerability of the Oracle Applications Framework component of the Oracle E-Business Suite automation system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the information...