3951 matches found
xen-kernel -- x86: Mishandling of instruction pointer truncation during emulation
The Xen Project reports: When emulating HVM instructions, Xen uses a small i-cache for fetches from guest memory. The code that handles cache misses does not check if the address from which it fetched lies within the cache before blindly writing to it. As such it is possible for the guest to...
SWIFT Warns Banks Of More Cyberattacks
Reports of additional attacks against banks that use SWIFT, the global financial transaction messaging network, came to light Wednesday. The attacks were reportedly persistent, sophisticated and in some cases successful, impacting an undisclosed number of financial institutions. It’s the latest...
Updated mupdf packages fix security vulnerability
A flaw was discovered in the pdfloadmeshparams function allowing out-of-bounds write access to memory locations. With carefully crafted input, that could trigger a heap overflow, resulting in application crash or possibly having other unspecified impact CVE-2016-6525. Also, mupdf already containe...
Cisco SNMP RCE vulnerability reproduction process-vulnerability warning-the black bar safety net
NSA data leaked, many cattle are given in the analysis report, let me benefit. As a technical noob, want to share the following analysis\eqgrp-free-file\Firewall\EXPLOITS\EXBA ideas, build vulnerability of the environment of the process and Use Conditions of the test. This article has a very stro...
Universal Serial aBUSe: USaBUSe
Universal Serial aBUSe Universal Serial aBUSe is a project released at Defcon 24 by Rogan Dawes. The team took some fairly common attacks fake keyboards in small USB devices that type nasty things and extended them to provide us with a bi-directional binary channel over our own wifi network to gi...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 14.1 and 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-45.3.0esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...
Moderate: Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server
Red Hat Satellite 6.2 now available for Red Hat Enterprise Linux 6 and 7 Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. It performs...
SuperFish Vulnerability - Lenovo Support US
No description provided...
Potential vulnerability in Intel® SSD Data Center Family for SATA - Lenovo Support NL
No description provided...
Moderate: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.2.1 security and bug fix update
Red Hat JBoss Fuse and A-MQ 6.2.1 Rollup Patch 3, which fixes two security issues and includes several bug fixes and various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...
DNS Analysis Tool: Bluto
The target domain is queried for MX and NS records. Sub-domains are passively gathered via NetCraft. The target domain NS records are each queried for potential Zone Transfers. If none of them gives up their spinach, Bluto will attempt to identify if SubDomain Wild Cards are being used. If they a...
MS16-092: Description of the security update for Windows Kernel: July 12, 2016
None None...
APSB16-24 Security Update available for Adobe XMP Toolkit for Java
Adobe has released a security update for the Adobe XMP Toolkit for Java. This update resolves an important vulnerability that could lead to information disclosure CVE-2016-4216. Adobe recommends users update their product installation using the instructions provided in the “Solution” Section belo...
The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure
A vulnerability in the Linux kernel allows a local user to trigger a system panic by using specially crafted BPF instructions. The BPFSANCNLATTR and BPFSANCNLATTRNEST instructions cause an error in the skrunfilter function from net/core/filter.c...
DLA-542-1 pidgin - security update
Bulletin has no description...
[SECURITY] Fedora 24 Update: mediawiki-1.26.3-1.fc24
MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances...
MS16-082: Description of the security update for Windows Structured Query: June 14, 2016
None None...
Capture Windows Kernel Activity: Fibratus
Capture Windows Kernel Activity: Fibratus Tool for exploration and tracing of the Windows kernel Fibratus is a tool which is able to capture the most of the Windows kernel activity – process/thread creation and termination, file system I/O, registry, network activity, DLL loading/unloading and mu...