960 matches found
GStreamer Good Plug-ins write count buffer overflow vulnerability
GStreamer is a multimedia framework for creating streaming applications in the GNOME desktop environment. A buffer overflow vulnerability exists in GStreamer Good Plug-ins. An attacker could exploit the vulnerability to execute arbitrary code in the context of a user running the affected...
Ubuntu 14.04 LTS / 16.04 LTS : GStreamer Good Plugins vulnerability (USN-3135-2)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3135-2 advisory. USN-3135-1 fixed a vulnerability in GStreamer Good Plugins. The original security fix was incomplete. This update fixes the problem. Tenable has...
Ubuntu 14.04 LTS / 16.04 LTS : GStreamer Good Plugins vulnerability (USN-3135-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3135-1 advisory. Chris Evans discovered that GStreamer Good Plugins did not correctly handle malformed FLC movie files. If a user were tricked into opening a crafted F...
USN-3135-1: GStreamer Good Plugins vulnerability
Chris Evans discovered that GStreamer Good Plugins did not correctly handle malformed FLC movie files. If a user were tricked into opening a crafted FLC movie file with a GStreamer application, an attacker could cause a denial of service via application crash, or execute arbitrary code with the...
USN-3135-1 gst-plugins-good0.10, gst-plugins-good1.0 vulnerability
Chris Evans discovered that GStreamer Good Plugins did not correctly handle malformed FLC movie files. If a user were tricked into opening a crafted FLC movie file with a GStreamer application, an attacker could cause a denial of service via application crash, or execute arbitrary code with the...
EFF Files Lawsuit Challenging DMCA's Restrictions Security Researchers
The Electronic Frontier Foundation filed a lawsuit Thursday against the U.S. Government over a provision within the Digital Millennium Copyright Act that it says impinges on free speech and hobbles security researchers ability to do their job. The lawsuit asks the court to strike down the highly...
Good Work - BSD license, Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Good Work published at the 'play' market has multiple vulnerabilities...
Good for Enterprise™ - Certificates or keys found, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Good for Enterprise™ published at the 'play' market has multiple vulnerabilities...
WP Good News Themes Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in Wordpress Good News Themes, which can be exploited by remote attackers to inject client-side scripting code...
Good Dog - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Good Dog published at the 'play' market has multiple vulnerabilities...
Good Night Hippo - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Good Night Hippo published at the 'play' market has multiple vulnerabilities...
Top Good Morning Images - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Top Good Morning Images published at the 'play' market has multiple vulnerabilities...
Crypto Panel Experts Clash on FBI-Apple Debate
SAN FRANCISCO—One would think that six of the smartest security people on the planet could come to some sort of collective conclusion on the FBI-Apple debate. But that wasn’t the case today during the annual Cryptographers’ Panel at RSA Conference. The debate over whether Apple should assist the...
WordPress Good News Themes - Cross Site Scripting
Because of this vulnerability in the "s" value of the "Good News themes" module, remote attackers can inject client-side script code to the vulnerable index GET method request. Also, the "s" value is wrong encoded and not filtered by the regular validation. Solution Update the theme...
WP Good News Themes Cross Site Scripting
Document Title: =============== WP Good News Themes - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1771 Release Date: ============= 2016-02-29 Vulnerability Laboratory ID VL-ID:...
WP Good News Themes - CS Cross Site Web Vulnerability
Document Title: =============== WP Good News Themes - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1771 Release Date: ============= 2016-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 1771...
WP Good News Themes - CS Cross Site Web Vulnerability
Document Title: =============== WP Good News Themes - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1771 Release Date: ============= 2016-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 1771...
Rogue Chinese iOS App Removed from App Store
Apple removed an iOS application from its Chinese iTunes App Store that allowed users of non-jailbroken iOS devices to install pirated and jailbroken apps. Researchers at Palo Alto Networks, who discovered the rogue application, said the app was not malicious, but presented a serious security ris...
good-gay.com XSS vulnerability
Vulnerable URL: http://good-gay.com/s.php?search=%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E=Go! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 55867 Google Pagerank| 0 VI...
General Motors GM Vulnerability Disclosure Program
General Motors’ new vulnerability disclosure program puts it alongside Tesla as the only major automakers with a mechanism for security researchers to report flaws. Unlike Tesla’s program, however, GM’s does not offer a monetary reward. GM launched its program last week via the HackerOne platform...