318 matches found
Debian DLA-1246-1 : transmission security update
Tavis Ormandy discovered a vulnerability in the Transmission BitTorrent client; insecure RPC handling between the Transmission daemon and the client interfaces may result in the execution of arbitrary code if a user visits a malicious website while Transmission is running. For Debian 7 'Wheezy',...
[SECURITY] [DLA 1246-1] transmission security update
Package : transmission Version : 2.52-3+nmu3 CVE ID : CVE-2018-5702 Debian Bug : 886990 Tavis Ormandy discovered a vulnerability in the Transmission BitTorrent client; insecure RPC handling between the Transmission daemon and the client interfaces may result in the execution of arbitrary code if ...
New BitTorrent Flaw Puts Linux & Windows devices at risk of hacking
By Waqas Tavis Ormandy, an IT security researcher at Googles Project Zero This is a post from HackRead.com Read the original post: New BitTorrent Flaw Puts Linux Windows devices at risk of hacking...
[SECURITY] [DSA 4087-1] transmission security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4087-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 14, 2018 https://www.debian.org/security/faq -...
Cisco Patches Another Critical Ormandy Bug in WebEx Extension
Cisco has provided updates today for WebEx browser extensions for Chrome and Firefox after Google Project Zero researcher Tavis Ormandy and Divergent Security’s Cris Neckar privately disclosed a vulnerability that could be abused to remotely run code on a computer running the browser extension...
Wormable Windows Zero Day Reported to Microsoft
Google Project Zero researcher Tavis Ormandy has a long legacy of finding unknown, critical software vulnerabilities to his credit. So when he calls a new bug the worst in recent memory, it’s likely not hyperbole. On Saturday, Ormandy tweeted that he and colleague Natalie Silvanovich has found a...
LastPass Password Manager and then exposed a serious vulnerability, the browser-based Password Manager can also be used? - Vulnerability warning-the black bar safety net
No use cryptographic software before, we easily forget the password; use password software, we“reluctantly”leak the All password. LastPass, the popular password management software, recently again broke security vulnerabilities. Security personnel found in LastPass Chrome and Firefox 4.1.42 versi...
LastPass Fixes Three Password Theft Vulnerabilities
Engineers at LastPass fixed three different vulnerabilities in the password manager over the last 24 hours, all discovered by Google Project Zero researcher Tavis Ormandy, which could have allowed for the theft of passwords. One of the issues, a remote code execution vulnerability that could have...
Cisco Patches Critical Flaw in WebEx Chrome Plugin
A vulnerability in the Cisco WebEx Chrome Plugin, used by tens of millions for web conferencing in business environments, exposed computers to remote code execution. Cisco has begun releasing updates that patch the flaw, details of which were disclosed Monday by Google Project Zero researcher Tav...
USN-3148-1: Ghostscript vulnerabilities
Tavis Ormandy discovered multiple vulnerabilities in the way that Ghostscript processes certain Postscript files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service or possibly execute arbitrary code. CVE-2016-7976,...
Ubuntu 14.04 LTS / 16.04 LTS : Ghostscript vulnerabilities (USN-3148-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3148-1 advisory. Tavis Ormandy discovered multiple vulnerabilities in the way that Ghostscript processes certain Postscript files. If a user or automated syst...
LastPass Password Manager exposed a major vulnerability please upgrade your Firefox add-ons-bug warning-the black bar safety net
Focus on finding vulnerabilities a security researcher, has discovered well-known online Password Manager LastPass is a potential risk that an attacker can take the contact to the user's online account. Fortunately, LastPass has fixed this allow an attacker remote access to the millions of accoun...
LastPass Patches Ormandy Remote Compromise Flaw
LastPass has patched a vulnerability in its Firefox add-on found by Google Project Zero researcher Tavis Ormandy that allows attackers complete remote compromise of the password manager, . The divisive Ormandy submitted a bug report on Tuesday to LastPass after a series of tweets hinting at serio...
Symantec Antivirus Engine Malformed PE Header Parser Memory Access Violation
SUMMARY Symantec's Anti-Virus Engine AVE was susceptible to memory access violation due to a flaw when parsing a specifically-crafted PE header file in the kernel. The most common symptom of a successful attack would result in a system crash. AFFECTED PRODUCTS Symantec Anti Virus Engine --- CVE |...
Antivirus Avast is exposed 0day vulnerabilities in users computer to execute malicious code-vulnerability warning-the black bar safety net
Google security expert Tavis Ormandy, found a Avast antivirus of 0day vulnerabilities, the vulnerabilities could lead to attackers invade a user's computer and the user computers to execute malicious code. Tavis Ormandy recently in the Avast antivirus found a serious 0day vulnerability. And just...
[SECURITY] [DLA 261-1] aptdaemon security update
Package : aptdaemon Version : 0.31+bzr413-1.1+deb6u1 CVE ID : CVE-2015-1323 Debian Bug : 789162 Tavis Ormandy discovered that Aptdeamon incorrectly handled the simulate dbus method. A local attacker could use this issue to possibly expose sensitive information, or perform other file access as the...
Ubuntu 14.04 LTS : Aptdaemon vulnerability (USN-2648-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2648-1 advisory. Tavis Ormandy discovered that Aptdeamon incorrectly handled the simulate dbus method. A local attacker could use this issue to possibly expose sensitive...
USN-2648-1: Aptdaemon vulnerability
Tavis Ormandy discovered that Aptdeamon incorrectly handled the simulate dbus method. A local attacker could use this issue to possibly expose sensitive information, or perform other file access as the root user...
Debian DLA-238-1 : fuse security update
Tavis Ormandy discovered that FUSE, a Filesystem in USErspace, does not scrub the environment before executing mount or umount with elevated privileges. A local user can take advantage of this flaw to overwrite arbitrary files and gain elevated privileges by accessing debugging features via the...
