Wikimedia CheckUser 安全漏洞

Wikimedia CheckUser is a advanced investigation tool of the Wikimedia Foundation designed to combat disruptive behavior. There is a security vulnerability in Wikimedia CheckUser, which stems from the lack of checks to ensure that the current user operating the system actually has the permission t...

EUVD-2014-6677

Malware in sbrugna...

Fedora: Security Advisory for onionscan (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Information disclosure

The Investigation Tool aka gov.ca.post.lp.itool application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6799

The Investigation Tool (gov.ca.post.lp.itool) 1.0.0 for Android is affected. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafted certificate. The connected doc...

CVE-2014-6799

The Investigation Tool aka gov.ca.post.lp.itool application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Redline: Answering Your Questions

Those of you who attended the "Tools of Engagement: Redline™ - We've Got the Tool, If You've Got the Time" webinar last month by David Ross and myself will recall that we ran short on time while answering all of your questions. The webinar covered the latest updates to Redline, Mandiant's free to...