4413 matches found
LastPass Password Manager exposed a major vulnerability please upgrade your Firefox add-ons-bug warning-the black bar safety net
Focus on finding vulnerabilities a security researcher, has discovered well-known online Password Manager LastPass is a potential risk that an attacker can take the contact to the user's online account. Fortunately, LastPass has fixed this allow an attacker remote access to the millions of accoun...
F5 Networks BIG-IP : GraphicsMagick vulnerability (K82747025)
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | pipe character at the start of a filename. CVE-2016-5118 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
GNU Wget Arbitrary File Upload / Potential Remote Code Execution
============================================= - Release date: 06.07.2016 - Discovered by: Dawid Golunski - Severity: High - CVE-2016-4971 ============================================= I. VULNERABILITY ------------------------- GNU Wget 1.18 Arbitrary File Upload / Potential RCE II. BACKGROUND...
ExpressionEngine: Filename and directory enumeration
Hello, The "Import File Converter" can be abused by an admin to map the server directories and files, because the "File location" field doesn't sanitize the user input and allows access to root directories and files. Steps to reproduce: 1- Go to...
The vulnerability of the Internet Explorer browser, which allows a malicious actor to execute web scripts with elevated privileges
The Internet Explorer browser contains a vulnerability that allows a malicious attacker to elevate their privileges level. By exploiting this vulnerability, a malicious individual cannot execute arbitrary code, but they can use it to exploit other vulnerabilities with elevated privileges for...
Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3018-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3018-1 advisory. Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility...
Advantech Patches WebAccess Remote Code Execution Flaws
Advantech has published a new version of its WebAccess product to address vulnerabilities that put installations at risk to remote code execution attacks. Exploiting the vulnerabilities would be a challenge, however, according to an advisory published Tuesday by the Industrial Control Systems Cyb...
Google Android - '/system/bin/sdcard' Stack Buffer Overflow (PoC)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=798 Android: Stack-buffer-overflow in /system/bin/sdcard There's an integer overflow issue in getnodepathlocked, which results in a buffer overflow. For all of the calling paths, this is going to overflow a stack buffer in the pare...
drchrono: Information Disclosure
Hey, I found Following Security issue on your site. Information Disclosure :- your Wordpress installation in Disclosing its version Number in https://drchrono.com/blog/readme.html This can a hacker in speeding up the process or information gathering though discovering your wordpress version numbe...
This App Lets You Find Anyone's Social Profile Just By Taking Their Photo
Is Google or Facebook evil? Forget it! Russian nerds have developed a new Face Recognition technology based app called FindFace, which is a nightmare for privacy lovers and human right advocates. FindFace is a terrifyingly powerful facial recognition app that lets you photograph strangers in a...
USN-2961-1 lcms2 vulnerability
It was discovered that a double free could occur when the intent handling code in the Little CMS library detected an error. An attacker could use this to specially craft a file that caused an application using the Little CMS library to crash or possibly execute arbitrary code...
Potential Insufficient Entropy Vulnerability in ZF1
More info at https://framework.zend.com/security/advisory/ZF2016-01...
Linux ASLR vulnerabilities: an attacker with unlimited disable ASLR（CVE-2 0 1 6-3 6 7 2-the vulnerability warning-the black bar safety net
! Recently, security personnel repair a Linux ASLR in a relatively old vulnerability, with x86 devices on the 3 2-bit application usage rights of any user, by the RLIMITSTACK resource is set to“unlimited”you can disable ASLR. The vulnerability CVE number CVE-2 0 1 6-3 6 7 2, The CNNVD number of...
Mac Adware 'OSX.Pirrit' Unleashes Ad Overload, For Now
Researchers discovered a Mac OS X variant of the Windows-based Pirrit adware that creates a proxy server on infected Mac computers and injects ads into webpages. According to researchers at Boston-based Cybereason Labs, the adware, dubbed OSX.Pirrit, is mostly benign, serving up just ads, but has...
Home Budget Manager Lite - Exported components, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Home Budget Manager Lite published at the 'play' market has multiple vulnerabilities...
FreeBSD : Botan BER Decoder vulnerabilities (2004616d-f66c-11e5-b94c-001999f8d30b)
The botan developers reports : Excess memory allocation in BER decoder - The BER decoder would allocate a fairly arbitrary amount of memory in a length field, even if there was no chance the read request would succeed. This might cause the process to run out of memory or invoke the OOM killer...
Adobe Flash - Object.unwatch Use-After-Free Exploit
Exploit for multiple platform in category remote exploits Sources: https://bugs.chromium.org/p/project-zero/issues/detail?id=716 https://googleprojectzero.blogspot.ca/2016/03/life-after-isolated-heap.html The bug is an uninitialized variable in the fix to an ActionScript 2 use-after-free bug...
openSUSE Security Update : MozillaThunderbird (openSUSE-2016-402)
MozillaThunderbird was updated to 38.7.0 to fix the following issues : - Update to Thunderbird 38.7.0 boo969894 - MFSA 2015-81/CVE-2015-4477 bmo1179484 Use-after-free in MediaStream playback - MFSA 2015-136/CVE-2015-7207 bmo1185256 Same-origin policy violation using performance.getEntries and...
FreeBSD : git -- potential code execution (93ee802e-ebde-11e5-92ce-002590263bf5)
Debian reports : 'int' is the wrong data type for ... nlen assignment. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistribution a...