deep-pwning - Metasploit for Machine Learning

Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary. Note that deep-pwning in its current state is no where close to maturity or completion. It is meant to be experimented with, expanded...

Corega CG-WLBARGMH and CG-WLBARGNL Routers Cross-Site Scripting Vulnerabilities

Corega CG-WLBARGMH and CG-WLBARGNL are both wireless router products from Corega Japan. A cross-site scripting vulnerability exists in the Corega CG-WLBARGMH and CG-WLBARGNL routers, which stems from the program failing to properly filter user-submitted input. A remote attacker could exploit the...

Apple TV < 9.1 Multiple Vulnerabilities

According to its banner, the version of the remote Apple TV device is prior to 9.1. It is, therefore, affected by multiple vulnerabilities in the following components : - AppleMobileFileIntegrity - Compression - CoreGraphics - CoreMedia Playback - Disk Images - dyld - ImageIO - IOAcceleratorFamil...

Toshiba FlashAir does not require authentication in "Internet pass-thru Mode"

Overview FlashAir by Toshiba Corporation is a SDHC memory card which provides "Internet pass-thru Mode", allowing devices to access the internet while connecting to FlashAir. When configured in "Internet pass-thru Mode", FlashAir acts both as a station and as an access point. When "Internet...

Apple TV < 10 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 10. It is, therefore, affected by multiple vulnerabilities in the following components : - Audio - CFNetwork - CoreCrypto - FontParser - IOAcceleratorFamily - Kernel - libxml2 - libxslt - Security - WebKit Note that...

Web Application Security Scanner: Netsparker

THE ONLY FALSE POSITIVE FREE WEB APPLICATION SECURITY AND VULNERABILITY SCANNER Almost every business entity on the market today is trying hard to stretch out this year’s budget and somehow fit ‘security’ in the environment. Preferably, with minimal cost. Business owners, board directors, stock...

[SECURITY] Fedora 25 Update: python-proteus-4.0.2-1.fc25

A client library to access Tryton's internal objects like Models and Wizard s...

CVE-2016-4573

Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE...

FortiManager (Series) - Persistent Bookmark Vulnerability

Document Title: =============== FortiManager Series - Persistent Bookmark Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1685 Fortinet PSIRT ID: 1624461 Bulletin:...

FortiManager (Series) - Persistent Bookmark Vulnerability

Document Title: =============== FortiManager Series - Persistent Bookmark Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1685 Fortinet PSIRT ID: 1624461 Bulletin:...

[SECURITY] Fedora 23 Update: kf5-kitemmodels-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon with item models...

[SECURITY] Fedora 24 Update: kf5-kitemmodels-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 addon with item models...

CVE-2016-3493

Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Security Models...

CVE-2016-3493

Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Security Models...

Design/Logic Flaw

Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Security Models...

CVE-2016-3493

Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Security Models...

CVE-2016-3493

Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Security Models...

Apple TV < 9.2.2 Multiple Vulnerabilities

According to its banner, the version of the remote Apple TV device is prior to 9.2.2. It is, therefore, affected by multiple vulnerabilities in the following components : - CoreGraphics - ImageIO - IOAcceleratorFamily - IOHIDFamily - Kernel - libxml2 - libxslt - Sandbox Profiles - WebKit - WebKit...

CVE-2016-1418

Cisco Aironet Access Point Software 8.2100.0 on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via crafted CLI command parameters, aka Bug ID CSCuy64037...

Lenovo Tells Users to Uninstall Vulnerable Updater

Lenovo has waved the white flag on a vulnerable component of its pre-installed software updater and recommends that users uninstall it from more than 110 notebook and desktop models running Windows 10. The decision to have users yank the Lenovo Accelerator Application comes days after a Duo Labs...