JVN#97810280: KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates

KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided by th...

Gaming Company Settles on Bitcoin Mining Allegations

The ESEA League, an online competitive gaming community, has decided to settle with the state of New Jersey after the acting attorney general there alleged that the gaming community operator infected user-machines with malware designed to mine Bitcoins. The league is owned and managed by E-Sports...

Your TV now watching you too! LG Smart TV caught collecting owners' Habits and USB file names

Now your TV is also watching you, and is smart enough to spy on you. A UK blogger, developer and Linux enthusiast, known only as DoctorBeet has discovered that LG's smart TVs are sending personal information back to the company's servers about what channels you watch and viewing habits. Actually,...

Illegal Online Marketplaces Booming

A complete bundle of personal information hackers require to steal identities is available on the underground for as little as $25. The data, known as Fullz in underground parlance, includes name, address, phone number, date of birth, Social Security or EIN numbers, email address with password an...

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95070 Stand: 13. Ergänzungslieferung 13. EL. Hinweis:...

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients

IT-Grundschutz M5.091: Einsatz von Personal Firewalls für Clients. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95070 Stand: 13. Ergänzungslieferung 13. EL. Hinweis:...

Threat Outbreak Alert: Fake Online Dating Request Email Messages on November 15, 2013

Medium Alert ID: 31793 First Published: 2013 November 16 03:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a personal photo for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Personal Photo Sharing Email Messages on October 26, 2013

Medium Alert ID: 31505 First Published: 2013 October 28 17:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain personal pictures for the recipient. The text in the email message attempts to persuade the recipient to open...

FortKnox Personal Firewall 9.0.305.0/10.0.305.0 - Kernel Driver 'fortknoxfw.sys' Memory Corruption

/ Exploit Title: 0day FortKnox Personal Firewall kernel driver fortknoxfw.sys memory corruption vulnerability Date: 25/10/2013 Author: Arash Allebrahim Contact : [email protected] Vendor Homepage: http://www.fortknox-firewall.com/ Vulnerable software :...

Lavabit Gives Users Chance to Recover Email Archives

Lavabit, the now-shuttered secure email provider that has become something of a rallying point for privacy advocates and security experts in the ongoing NSA surveillance saga, is giving its former users until Thursday night to change their passwords on the service. They will then have a short...

Threat Outbreak Alert: Fake Personal Picture Sharing Notification Email Messages on October 6, 2013

Medium Alert ID: 31129 First Published: 2013 October 7 14:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a personal picture sharing attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Portuguese Personal Picture Notification Email Messages on October 5, 2013

Medium Alert ID: 31128 First Published: 2013 October 7 14:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain personal images for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on March 18, 2014

Medium Alert ID: 31006 First Published: 2013 September 28 05:14 GMT Last Updated: 2014 March 19 13:52 GMT Version: 5 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a personal photo for the recipient. The text in the...

XAMPP 1.8.1 Local Write Access Vulnerability

XAMPP version 1.8.1 allows an unprivileged user the ability to write to the local disk. It has been detected than an unprivileged user can write in the local disk and the local file "lang.tmp" can be modified in the remote machine. The injection is done through the page "/xampp/lang.php"...

WebGL Information disclosure through OS X NVIDIA graphic drivers — Mozilla

Mozilla developer Victor Porof reported a flaw in the NVIDIA OS X graphic drivers that would allow portions of a user's desktop or other visible applications to be incorporated into WebGL canvases. This could result in personal information becoming available to web content...

OAuth Administration screen is visible to anonymous users

If anonymous user access is enabled under "Global Permission", user can access to "OAuth Administration" page without the need to log-in. Here is the URL to the page: /plugins/servlet/oauth/view-consumer-info This page display Confluence administrators menu on the sidebar and other information su...

Discuz X3.0存储型XSS（应该是通杀）

简要描述： 过滤的不严格 详细说明： DZ3的日志功能，tamper data抓包并修改可插入恶意xss代码。 有效payload如下： 我还在那个什么叫习科的论坛上测试了一下，他们应该是dz2.5 也成功了。 在个人空间发布日志，利用方法和上面的一样。 漏洞证明： 第一张是dz3的最新版 我下了个GBK version: 第二张是习科的...

2 Million Customer Records Stolen in Vodafone Germany breach

Security experts are warning Vodafone customers, particularly those in Germany, of a possible increase in phishing attacks after an insider at the telecommunications giant accessed a database and stole personal information on as many as two million customers. German police have a suspect, adding...

Personal Address Book 2.0 File Upload

TITLE: Unauthenticated Remote File Upload via HTTP for Personal Address Book 2.0 on iOS Date: 8/1/2013 Author: Larry W. Cashdollar, @larry0 Download: https://itunes.apple.com/us/app/personal-address-book-helpful/id490328390?mt=8 http://www.tayutec.com/indexen.html Description: "Features: To creat...

Windows 8 Picture Gesture Authentication Research

Typing on a smartphone or tablet keyboard lends itself to a lot of fat-fingered mistakes. Recent updates to mobile operating systems and desktop OSes such as Windows 8, however, have tried to better leverage the touch screen for things such as authentication. Users, for example, have the option o...