1684 matches found
sqlite (>=0.19.7, <=0.21.1), sqlite3-sys (>=0.6.7, <=0.9.2) +3 more potentially affected by unknown CVE via temporary (0.5.1)
temporary CARGO version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on temporary and may be impacted: - sqlite =0.19.7, =0.6.7, =0.11.0, =0.2.6, =0.2.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2018-0022...
pandora.ice.it XSS vulnerability
Open Bug Bounty ID: OBB-655224 Description| Value ---|--- Affected Website:| pandora.ice.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Traffic sign near ICE headquarters hacked with “Abolish ICE” message
By Waqas For the last few years, hacking a traffic sign or This is a post from HackRead.com Read the original post: Traffic sign near ICE headquarters hacked with "Abolish ICE" message...
nas-sites.org XSS vulnerability
Open Bug Bounty ID: OBB-577279 Description| Value ---|--- Affected Website:| nas-sites.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Is Your DJI Drone a Chinese Spy? Leaked DHS Memo Suggests
The United States Department of Homeland Security DHS has recently accused Da-Jiang Innovations DJI, one of the largest drone manufacturers, of sending sensitive information about U.S. infrastructure to China through its commercial drones and software. A copy memo from the Los Angeles office of t...
ice-watch.com XSS vulnerability
Open Bug Bounty ID: OBB-388308 Description| Value ---|--- Affected Website:| ice-watch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Introducing GoCrack: A Managed Password Cracking Tool
FireEye's Innovation and Custom Engineering ICE team released a tool today called GoCrack that allows red teams to efficiently manage password cracking tasks across multiple GPU servers by providing an easy-to-use, web-based real-time UI Figure 1 shows the dashboard to create, view, and manage...
Introducing GoCrack: A Managed Password Cracking Tool
FireEye's Innovation and Custom Engineering ICE team released a tool today called GoCrack that allows red teams to efficiently manage password cracking tasks across multiple GPU servers by providing an easy-to-use, web-based real-time UI Figure 1 shows the dashboard to create, view, and manage...
Introducing pywintrace: A Python Wrapper for ETW
Introduction Event tracing for Windows ETW is a lightweight logging facility first introduced with Windows 2000. Originally intended as a software diagnostic, troubleshooting and performance monitoring tool, it was greatly expanded in Windows Vista to create a lightweight debugging mechanism. The...
Introducing pywintrace: A Python Wrapper for ETW
ARCHIVED STORY Introducing pywintrace: A Python Wrapper for ETW By Anthony Berglund, Kevin Boyd · September 19, 2017 Introduction Event tracing for Windows ETW is a lightweight logging facility first introduced with Windows 2000. Originally intended as a software diagnostic, troubleshooting and...
CouchPotato: CIA Hacking Tool to Remotely Spy On Video Streams in Real-Time
After disclosing CIA's strategies to hijack and manipulate webcams and microphones to corrupt or delete recordings, WikiLeaks has now published another Vault 7 leak, revealing CIA's ability to spy on video streams remotely in real-time. Dubbed 'CouchPotato,' document leaked from the CIA details h...
libICE: weak entropy usage in session keys
It was discovered that libICE used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list...
gnome-session gsm-xsmp-server.c file denial of service vulnerability
gnome-session is a session tool for the Gnome 2.x desktop environment. A security vulnerability exists in the context of the 'accepticeconnection' function in the gsm-xsmp-server.c file in versions of gnome-session prior to 2.29.92. A local attacker can exploit this vulnerability to cause a denia...
SUSE-SU-2017:1848-1 Security update for xorg-x11-libICE
This update for xorg-x11-libICE fixes the following issues: - CVE-2017-2626: Creation of the ICE auth session cookies used insufficient randomness, making these cookies predictable. A more random generation method has been implemented. boo1025068...
CVE-2017-11171
Bad reference counting in the context of accepticeconnection in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data an invalid magic cookie. Each failed authentication...
DEBIAN-CVE-2017-11171
Bad reference counting in the context of accepticeconnection in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data an invalid magic cookie. Each failed authentication...
CVE-2017-11171
Bad reference counting in the context of accepticeconnection in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data an invalid magic cookie. Each failed authentication...
ICE is Using Stingray to Track Illegal Immigrants
According to court documents, US Immigration and Customs Enforcement is using Stingray cell-site simulators to track illegal immigrants...
