498 matches found
Adobe Reader for Android exposes insecure Javascript interfaces
------------------------------------------------------------------------ Adobe Reader for Android exposes insecure Javascript interfaces ------------------------------------------------------------------------ Yorick Koster, April 2014...
Update Adobe Reader app for Android to Patch Remote Code Execution Vulnerability
If you're one of the 400 million Android users out there who have installed Adobe Reader app that helps you to view PDF documents on mobile devices, then you should immediately update your app from Google Play Store. Adobe has released an updated Adobe Reader 11.2.0 version to addresses an...
Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla
Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...
Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla
Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...
New ZeuS Malware spreading automatically via USB Flash Drives
The notorious Zeus Trojan, a family of banking malware known for stealing passwords and draining the accounts of its victims, has steadily increased in recent months. The malware family itself is frequently updated with mechanisms designed to evade detection by antivirus and network security...
New ZeuS Malware spreading automatically via USB Flash Drives
The notorious Zeus Trojan, a family of banking malware known for stealing passwords and draining the accounts of its victims, has steadily increased in recent months. The malware family itself is frequently updated with mechanisms designed to evade detection by antivirus and network security...
Foxit Reader Plugin for Firefox URL String Stack Buffer Overflow
A stack buffer overflow vulnerability has been identified in Foxit Reader Plugin for Firefox. The vulnerability is due to a lack of bounds checking in an essential dll file, and affects handling of URLs. A remote attacker could exploit this vulnerability by enticing a target user to load a...
Scientific Linux Security Update : kdegraphics on SL4.x, SL5.x i386/x86_64
Multiple integer overflow flaws were found in KPDF's JBIG2 decoder. An attacker could create a malicious PDF file that would cause KPDF to crash or, potentially, execute arbitrary code when opened. CVE-2009-0147, CVE-2009-1179 Multiple buffer overflow flaws were found in KPDF's JBIG2 decoder. An...
Months After A Patch, Targeted Attacks Still Using Adobe Flash Bug
More than three months after it was patched, attackers are still using a vulnerability in Adobe’s Flash product in targeted, ‘APT-style’ attacks. The vulnerability, identified as CVE-2012-0754 was patched in February and linked to targeted attacks weeks later. But new attacks targeting unpatched...
Stratfor Subscribers Experience Phishing Attempts
Cybercriminals continue targeting customers of Stratfor, the well-known, Texas-based security and policy think-tank hacked by Anonymous on Christmas, according to a TechNet report. Social engineers have been sending malicious and fraudulent emails to Strafor subscribers since their customer...
APEC Host Committee Spear-Phished by China
An Analysis published earlier this month by Kahu Security raises the possibility that the hack of systems used by the Asia Pacific Economic Cooperation host committee was the result of a spear phishing attack with links back to the Chinese mainland. As Threatpost reported yesterday, computers...
Stolen Government Certificate Used to Sign Malware
F-Secure researchers claim that malware spreading via malicious PDF files is signed with a valid certificate stolen from the Government of Malaysia, in just the latest evidence that scammers are using gaps in the security of digital certificates to help spread malicious code. The malware,identifi...
Adobe Reader ICC Embedded In PDF ProfileDescTag Integer Overflow (APSB11-16; CVE-2011-2097)
An integer overflow vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an integer overflow error in ICC data within Adobe Reader and Acrobat while parsing the ProfileDescriptionTag structure within ICC streams. A remote attacker might exploit this issue by...
Adobe Reader ICC Embedded In PDF CLUT Array Buffer Overflow (APSB11-03; CVE-2011-0598)
Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A remote code execution vulnerability has been discovered in Adobe Reader and Acrobat. The...
Metasploit 3.5.1 adds Cisco device exploitation !
Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...
USBsploit v0.5 BETA Version Out !
"USBsploit is a PoC to generate Reverse TCP backdoors, malicious PDF or LNK files. But also running Autorun|play infections and dumping all USB files remotely on multiple targets at the same time, a set of extensions to dump can be specified. All EXE, PDF and LNK on the USB targets can also be...
CentOS Update for cups CESA-2010:0755 centos4 i386
Check for the Version of cups OpenVAS Vulnerability Test CentOS Update for cups CESA-2010:0755 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Researchers: Google Aurora Attackers Back in Business?
Just when you thought it was safe to go back in your e-mail…Researchers say a new round of targeted attacks appear to come from the same group responsible for attacks against Google and other top U.S. firms. Writing on the Symantec Security blog...
Symantec generic PDF detection bypass
No description provided by source. Symantec multiple products - Generic PDF bypass Cheap plug : Speaking of PDF - If you are interested in client-side vulnerabilities visit HACK.LU starting tomorrow 28-30 Oct with : Workshop: Bypassing the Perimeter: Client Side Exploitation - Nitesh Dhanjani,...
Adobe Reader JBIG2 Page Information Integer Overflow (APSB09-07; CVE-2009-0509)
Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A memory corruption vulnerability has been discovered in Adobe Reader and Acrobat. The...