762 matches found
FLIR FX / Lorex video stream hijack: Disclosure train wreck
We found that anyone could access any video stream for certain Swann wireless home security cameras. The technical detail is here. It was a consequence of weak authorisation by the cloud service provider, Ozvision. They claim to provide the back end to 3 million cameras, so we started looking at...
Potential security vulnerability with IBM WebSphere Application Server
Abstract Security Bulletin: Asset and Service Management Products - Potential security exposure with IBM WebSphere application server after installing fix for APAR PM44303 CVE-2012-3325 Content VULNERABILITY DETAILS: CVE ID: CVE-2012-3325 DESCRIPTION: Customers that have installed a Websphere...
Adobe Flash - Object.unwatch Use-After-Free Exploit
Exploit for multiple platform in category remote exploits Sources: https://bugs.chromium.org/p/project-zero/issues/detail?id=716 https://googleprojectzero.blogspot.ca/2016/03/life-after-isolated-heap.html The bug is an uninitialized variable in the fix to an ActionScript 2 use-after-free bug...
openSUSE Security Update : qemu (openSUSE-2016-252)
This update fixes the following security issues : - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. bsc957162 CVE-2015-7512 - Infinite loop in processing command block list. CVE-2015-8345 bsc956829 : This update also fixes a non-security bug : - Due to...
Fedora 21 : php-htmLawed-1.1.20-1.fc21 (2015-10169)
1.1.20 - 9 June 2015. Fix for a potential security vulnerability arising from unescaped double-quote character in single-quoted attribute value of some deprecated elements when tag transformation is enabled; recognition for non-HTML4 standard 'allowfullscreen' attribute of 'iframe.' Note that...
Debian DLA-250-1 : libclamunrar security update
Upstream published version 0.98.5. This update updates sqeeze-lts to the latest upstream release in line with the approach used for other Debian releases. This update corrects a double-free error that existed within the 'unrarextractnextprepare' function libclamunrariface/unrariface.c when parsin...
Debian DLA-242-1 : imagemagick security update
This update fixes a large number of potential security problems due to insufficient data validation when parsing different input formats. Most of those potential security problems do not have a CVE number assigned. While the security implications of all of these problems are not all fully known, ...
DSA-3039-1 chromium-browser - security update
Bulletin has no description...
Fedora 19 : smb4k-1.1.2-1.fc19 (2014-6255)
New upstream release. Update to Smb4K 1.1.1, the first bug fix release of the stable 1.1 branch. This release fixes a crash bug and a potential security issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
Don't Fall for Fake Instagram Desktop Applications Offering 'Image Viewer'
Today, the estimated number of known computer threats like viruses, worms, backdoors, exploits, Trojans, spyware, password stealers, and other variants of potentially unwanted software range into millions. It has ability to create several different forms of itself dynamically in order to thwart...
Debian DSA-2811-1 : chromium-browser - several vulnerabilities
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2013-6634 Andrey Labunets discovered that the wrong URL was used during validation in the one-click sign on helper. - CVE-2013-6635 cloudfuzzer discovered use-after-free issues in the InsertHTML and Indent DOM editing...
ECShop V2. 7. 3 GBK release1106 injection 0day and fix-vulnerability warning-the black bar safety net
C0deplay Team j8g Look at the code / Modify personal information / elseif $action == ‘acteditprofile’ the includeonceROOTPATH . ‘includes/libtransaction.php’; $birthday = trim$POST'birthdayYear' .’-’. trim$POST'birthdayMonth' .’-’. trim$POST'birthdayDay'; $email = trim$POST'email'; $other'msn' =...
[security bulletin] HPSBHF02819 SSRT100920 rev.2 - HP, 3COM, and H3C Routers & Switches, Remote Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03515685 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03515685 Version: 2 HPSBHF02819...
HP-UX Update for Java HPSBUX02685
Check for the Version of Java OpenVAS Vulnerability Test HP-UX Update for Java HPSBUX02685 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...
HP-UX Update for Kerberos HPSBUX02623
Check for the Version of Kerberos OpenVAS Vulnerability Test HP-UX Update for Kerberos HPSBUX02623 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
HP-UX Update for Apache-based Web Server HPSBUX02612
Check for the Version of Apache-based Web Server OpenVAS Vulnerability Test HP-UX Update for Apache-based Web Server HPSBUX02612 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
HP-UX Update for Java HPSBUX02608
Check for the Version of Java OpenVAS Vulnerability Test HP-UX Update for Java HPSBUX02608 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...
HP-UX Update for Tomcat Servlet Engine HPSBUX02541
Check for the Version of Tomcat Servlet Engine OpenVAS Vulnerability Test HP-UX Update for Tomcat Servlet Engine HPSBUX02541 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
HP-UX Update for Apache-based Web Server HPSBUX02531
Check for the Version of Apache-based Web Server OpenVAS Vulnerability Test HP-UX Update for Apache-based Web Server HPSBUX02531 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...