9219 matches found
Command injection
Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...
CVE-2017-15403
Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...
CVE-2017-15403
Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...
Container Security Becomes a Priority for Enterprises
Among the IT innovations that businesses are using to digitally transform operations, containers might be the most disruptive and revolutionary. “They’re a real game changer,” Qualys Chief Product Officer Sumedh Thakar said at QSC 2018 in Las Vegas. DevOps teams have embraced containers because...
CVE-2018-20679
An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components consumed by the DHCP server, client, and relay allows a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to verification in udhcpgetoption in...
January 8, 2019—KB4480963 (Monthly Rollup)
None None...
January 8, 2019—KB4480960 (Security-only update)
None None...
January 8, 2019—KB4480957 (Security-only update)
None None...
January 8, 2019—KB4480972 (Security-only update)
None None...
The vulnerability of the Web framework component of the Cisco IOS XE operating system allows a hacker to trigger a service failure.
The vulnerability of the Web framework component of the Cisco IOS XE operating system arises due to errors in parsing HTTP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted HTTP packet...
Hacker found using Twitter memes to spread malware
By Waqas Last year a shocking report revealed how Russian hackers were found spreading malware through Britney Spears's Instagram posts. Now, the IT security researchers at Trend Micro have discovered a sophisticated campaign in which an unknown hacker is using memes on the social networking...
Teaching Cybersecurity Policy
Peter Swire proposes a a pedagogic framework for teaching cybersecurity policy. Specifically, he makes real the old joke about adding levels to the OSI networking stack: an organizational layer, a government layer, and an international layer...
Twitter Discloses Suspected State-Sponsored Attack After Minor Data Breach
Twitter has been hit with a minor data breach incident that the social networking site believes linked to a suspected state-sponsored attack. In a blog post published on Monday, Twitter revealed that while investigating a vulnerability affecting one of its support forms, the company discovered...
December 11, 2018—KB4471332 (OS Build 17763.194)
None None...
December 11, 2018—KB4471328 (Security-only update)
None None...
December 11, 2018—KB4471330 (Monthly Rollup)
None None...
December 11, 2018—KB4471322 (Security-only update)
None None...
December 11, 2018—KB4471319 (Security-only update)
None None...