4176 matches found
[SECURITY] [DSA 3482-1] libreoffice security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3482-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 17, 2016 https://www.debian.org/security/faq -...
DSA-3482-1 libreoffice - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3482-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FLARE Script Series: flare-dbg Plug-ins
Introduction This post continues the FireEye Labs Advanced Reverse Engineering FLARE script series. In this post, we continue to discuss the flare-dbg project. If you haven’t read my first post on using flare-dbg to automate string decoding, be sure to check it out! We created the flare-dbg Pytho...
Sensio Labs Symfony Predictable Random Number Generation Vulnerability
Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A predictable random number generation vulnerability exist...
Dridex Botnet Resumes Spam Operations After the Holidays
FireEye Labs observed that Dridex operators were active during the holiday season. However, during the post-Christmas and New Year weeks, we observed a slowdown in their spam campaigns. Interestingly, their breaks were short. Over the past few weeks they have resumed operations and are building...
NETGEAR WNR1000v4 - Authentication Bypass
NETGEAR WNR1000v4 - Authentication Bypass ''' Exploit Title: NetgearWNR1000v4AuthBypass Google Dork: - Date: 06.10.2015 Exploit Author: Daniel Haake Vendor Homepage: http://www.netgear.com/ Software Link: http://downloadcenter.netgear.com/en/product/WNR1000v4 Version: N300 router firmware version...
Netgear WNR1000v4 - Authentication Bypass
''' Exploit Title: NetgearWNR1000v4AuthBypass Google Dork: - Date: 06.10.2015 Exploit Author: Daniel Haake Vendor Homepage: http://www.netgear.com/ Software Link: http://downloadcenter.netgear.com/en/product/WNR1000v4 Version: N300 router firmware versions 1.1.0.24 - 1.1.0.31 Tested on: Can be...
Ipswitch MOVEit DMZ 8.1 Authorization Bypass
Profundis Labs - Security Advisory Vulnerablity Title ================== A security issue in MOVEit web and mobile application allows for unauthorized access to arbitrary files and documents Vendor: ======= Ipswitch, Inc http://www.ipswitchft.com Product: ======== MOVEit File Transfer MOVEit is a...
Holiday Season 2015 Email Campaign
The holiday season is a time when many people go on vacation or at least get much-needed downtime from work, but that is not always the case with attackers. To better understand the threats we face during “the most wonderful time of the year,” FireEye Labs has been collecting data on the most...
Android Devices Linux Zero Day Kernel Vulnerability
Google is downplaying the scope of the critical Linux vulnerability patched this week, suggesting that the number of affected Android devices has been exaggerated. The Android OS is built upon the Linux kernel, but minus many of the libraries that are included in standard Linux builds. Initially,...
Sensio Labs Symfony会话固定漏洞
No description provided by source...
Unspecified Vulnerability in Sensio Labs Symfony
Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A security vulnerability exists in the...
Chrome third-party extensions to be exposed can record private information and sell it-vulnerability warning-the black bar safety net
The Swedish security firm Detectify Labs currently represents some of the Chrome extension app will track The user's Internet history, and even also includes Facebook Connect and privacy of the access token, is connected to a private Dropbox and Google Drive file link. Affect a wide range is not...
Sensio Labs Twig displayBlock任意代码执行漏洞
No description provided by source...
Top-ranked Advertising Network Leads to Exploit Kit
Threat Overview The online advertisements that people see across a wide range of popular and lesser-known websites can lead to malware infections and other forms of compromise, sometimes without any user interaction whatsoever and without any indicators there is an issue. This emerging threat is...
Sensio Labs Twig displayBlock Arbitrary Code Execution Vulnerability
Sensio Labs Twig is a PHP templating engine from the French company Sensio Labs that allows developers to customize tags and filters and create DSLs. An arbitrary code execution vulnerability exists in versions of Sensio Labs Twig prior to 1.20.0, which allows remote attackers to execute arbitrar...
CVE-2015-7809
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the self variable in a template...
CVE-2015-7809
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the self variable in a template...
Code injection
The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the self variable in a template...