CVE-2015-2247: Undefined Security Weakness

Unspecified vulnerability in Boosted Boards skateboards allows physically proximate attackers to modify skateboard movement, cause human injury, or cause physical damage via vectors related to an "injection attack" that blocks and hijacks a Bluetooth signal...

PT-2015-5686

Name of the Vulnerable Software and Affected Versions Boosted Boards skateboards affected versions not specified Description The issue allows physically proximate attackers to modify skateboard movement, potentially causing human injury or physical damage. This is achieved through vectors related...

Siemens SIMATIC and SIMATIC WinCC HMI Comfort Panels Denial of Service Vulnerability

Siemens SIMATIC WinCC is a complete Supervisory Control and Data Acquisition SCADA solution for industry, ranging from single-user systems to multi-user systems supporting redundant servers and remote Web client solutions. A security vulnerability in Siemens SIMATIC HMI Comfort Panels WinCC TIA...

New Coalition Launches Fight Against Patriot Act Section 215

A broad group of civil-rights, technology and political groups from across the spectrum has developed a new initiative to advocate for the repeal of Section 215 of the USA PATRIOT Act, the part that provides the authority for the bulk collection of phone metadata and other information. The new...

Inductive Automation Ignition Cross-Site Scripting Vulnerability

Ignition is an updated version of FactoryPMI, the HMI/SCADA product offered by Inductive Automation. Ignition has a security vulnerability that can be exploited by an attacker to execute malicious content in a vulnerable web application. The server reads data directly from the HTTP request and th...

Anonymous Hackers Threaten Israel with 'Electronic-Holocaust' on 7th April

The famous cyber hacker group Anonymous has vowed an 'Electronic Holocaust' against Israel in response to what the group calls 'crimes in the Palestinian territories'. In a spooky video "message to Israel" posted on YouTube March 4, Anonymous declared yet another cyber attack on April 7, which is...

EFF, ACLU, Other NGOs Urging U.N. to Create Privacy Watchdog

A coalition of 63 non-governmental organizations NGOs from around the world are calling on national governments to support the establishment of a special rapporteur on the right to privacy within the United Nations. According to U.N. documents, special rapporteurs also known as special procedures...

Siemens ICS Switches Hit With Buffer Overflow, Authentication Bugs

There are a number of serious vulnerabilities in the Siemens Ruggedcom WIN switches, including a remotely exploitable buffer overflow and a flaw that could allow an attacker to take actions on the device without authentication. The vulnerabilities affect several models of the Ruggedcom WIN...

Apple TV and iOS IOHIDFamily Buffer Overflow Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. A buffer overflow vulnerability exists in Apple TV and iOS IOHIDFamily, whic...

Apple MAC OS X Yosemite IOHIDFamily Driver Boundary Check Code Execution Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. The Apple MAC OS X Yosemite IOHIDFamily driver handles the presence of boundary checking on the user's client, allowing a malicious application to overwrite any portion of the kernel address space...

Schneider Electric ETG3000 FactoryCast HMI Gateway Authentication Bypass Vulnerability

The Schneider Electric ETG3000 FactoryCast HMI Gateway is a Web-based SCADA system. An authentication bypass vulnerability exists in the Schneider Electric ETG3000 FactoryCast HMI Gateway, which can be exploited by an attacker to bypass the authentication mechanism and gain unauthorized access to...

[SECURITY] Fedora 20 Update: libyaml-0.1.6-2.fc20

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C...

[SECURITY] Fedora 19 Update: libyaml-0.1.6-2.fc19

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C...

[SECURITY] Fedora 21 Update: libyaml-0.1.6-6.fc21

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C...

Kernel: HID: OOB write in magicmouse driver

An out-of-bounds write flaw was found in the way the Apple Magic Mouse/Trackpad multi-touch driver handled Human Interface Device HID reports with an invalid size. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on...

Kernel: HID: memory corruption via OOB write

A buffer overflow flaw was found in the way the Minibox PicoLCD driver handled Human Interface Device HID reports with an invalid size. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system...

IceHrm 7.1 - Multiple Vulnerabilities

IceHrm =7.1 Multiple Vulnerabilities Vendor: IceHRM Product web page: http://www.icehrm.com Affected version: = 7.1 Summary: IceHrm is Human Resource Management web software for small and medium sized organizations. The software is written in PHP. It has community free, commercial and hosted...

Detekt - scans your Windows computer for traces of known surveillance spyware

Detekt is a free tool that scans your Windows computer for traces of FinFisher and Hacking Team RCS, commercial surveillance spyware that has been identified to be also used to target and monitor human rights defenders and journalists around the world. In recent years we have witnessed a huge...

Detekt — Free Anti-Malware Tool To Detect Govt. Surveillance Malware

Human rights experts and Privacy International have launched a free tool allowing users to scan their computers for surveillance spyware, typically used by governments and other organizations to spy on human rights activists and journalists around the world. This free-of-charge anti-surveillance...

Hacking Team Defends Spyware, Attacks Researchers' Methods

Privacy advocates and anti-surveillance activists have been taking a close look at the way that some vendors of so-called lawful intercept and surveillance software and hardware systems conduct their business and which customers and governments they sell their wares to. Now, some of those...