481 matches found
Apple MAC OS X Yosemite DF File Memory Corruption Vulnerability
Apple MAC OS X Yosemite is the latest operating system developed by Apple. A memory corruption vulnerability exists in Apple MAC OS X Yosemite's handling of PDF files, which allows an attacker to construct a malicious PDF file and trick the user into parsing it, which could cause the application ...
US-CERT Warns of Dyre Banking Trojan
The Department of Homeland Security formally sounded the alarm Monday on Dyre, the banking Trojan that’s been spotted siphoning banking credentials from both large enterprises and major financial institutions as of late. The warning came in the form of an alert from the United States Computer...
Adobe Unix Acrobat Reader 4.0/5.0 WWWLaunchNetscape Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8069/info An individual has reported that Adobe Acrobat Reader for Unix systems is vulnerable to a buffer overflow condition. The error is allegedly related to the processing of hyperlinks, in the function...
Adobe Reader for Android exposes insecure Javascript interfaces
------------------------------------------------------------------------ Adobe Reader for Android exposes insecure Javascript interfaces ------------------------------------------------------------------------ Yorick Koster, April 2014...
Update Adobe Reader app for Android to Patch Remote Code Execution Vulnerability
If you're one of the 400 million Android users out there who have installed Adobe Reader app that helps you to view PDF documents on mobile devices, then you should immediately update your app from Google Play Store. Adobe has released an updated Adobe Reader 11.2.0 version to addresses an...
Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla
Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...
Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla
Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...
New ZeuS Malware spreading automatically via USB Flash Drives
The notorious Zeus Trojan, a family of banking malware known for stealing passwords and draining the accounts of its victims, has steadily increased in recent months. The malware family itself is frequently updated with mechanisms designed to evade detection by antivirus and network security...
New ZeuS Malware spreading automatically via USB Flash Drives
The notorious Zeus Trojan, a family of banking malware known for stealing passwords and draining the accounts of its victims, has steadily increased in recent months. The malware family itself is frequently updated with mechanisms designed to evade detection by antivirus and network security...
Foxit Reader Plugin for Firefox URL String Stack Buffer Overflow
A stack buffer overflow vulnerability has been identified in Foxit Reader Plugin for Firefox. The vulnerability is due to a lack of bounds checking in an essential dll file, and affects handling of URLs. A remote attacker could exploit this vulnerability by enticing a target user to load a...
Scientific Linux Security Update : kdegraphics on SL4.x, SL5.x i386/x86_64
Multiple integer overflow flaws were found in KPDF's JBIG2 decoder. An attacker could create a malicious PDF file that would cause KPDF to crash or, potentially, execute arbitrary code when opened. CVE-2009-0147, CVE-2009-1179 Multiple buffer overflow flaws were found in KPDF's JBIG2 decoder. An...
Months After A Patch, Targeted Attacks Still Using Adobe Flash Bug
More than three months after it was patched, attackers are still using a vulnerability in Adobe’s Flash product in targeted, ‘APT-style’ attacks. The vulnerability, identified as CVE-2012-0754 was patched in February and linked to targeted attacks weeks later. But new attacks targeting unpatched...
Stratfor Subscribers Experience Phishing Attempts
Cybercriminals continue targeting customers of Stratfor, the well-known, Texas-based security and policy think-tank hacked by Anonymous on Christmas, according to a TechNet report. Social engineers have been sending malicious and fraudulent emails to Strafor subscribers since their customer...
APEC Host Committee Spear-Phished by China
An Analysis published earlier this month by Kahu Security raises the possibility that the hack of systems used by the Asia Pacific Economic Cooperation host committee was the result of a spear phishing attack with links back to the Chinese mainland. As Threatpost reported yesterday, computers...
Stolen Government Certificate Used to Sign Malware
F-Secure researchers claim that malware spreading via malicious PDF files is signed with a valid certificate stolen from the Government of Malaysia, in just the latest evidence that scammers are using gaps in the security of digital certificates to help spread malicious code. The malware,identifi...
Adobe Reader ICC Embedded In PDF ProfileDescTag Integer Overflow (APSB11-16; CVE-2011-2097)
An integer overflow vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an integer overflow error in ICC data within Adobe Reader and Acrobat while parsing the ProfileDescriptionTag structure within ICC streams. A remote attacker might exploit this issue by...
Adobe Reader ICC Embedded In PDF CLUT Array Buffer Overflow (APSB11-03; CVE-2011-0598)
Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A remote code execution vulnerability has been discovered in Adobe Reader and Acrobat. The...
Metasploit 3.5.1 adds Cisco device exploitation !
Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...
USBsploit v0.5 BETA Version Out !
"USBsploit is a PoC to generate Reverse TCP backdoors, malicious PDF or LNK files. But also running Autorun|play infections and dumping all USB files remotely on multiple targets at the same time, a set of extensions to dump can be specified. All EXE, PDF and LNK on the USB targets can also be...
CentOS Update for cups CESA-2010:0755 centos4 i386
Check for the Version of cups OpenVAS Vulnerability Test CentOS Update for cups CESA-2010:0755 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...