HackerOne Offers Open Source Projects Free Access to Platform

HackerOne announced on Thursday the availability of a free version of its bug bounty platform called HackerOne Community Edition that will give open source projects tools for managing vulnerability submissions and creating bounty programs to improve software security. Eligible open source project...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to execute arbitrary code.

The vulnerability of programs for viewing and editing PDF files, such as Adober Reader, Adobe Reader Document Cloud, and Adobe Acrobat Document Cloud, arises due to operations that occur outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to execute arbitrary code.

The vulnerability of JavaScript programs for viewing PDF files in Adobe Reader, Document Cloud, Adobe Reader, and PDF editing programs like Adobe Acrobat in Document Cloud and Adobe Acrobat lies in the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to execute arbitrary code.

The vulnerability of JavaScript programs for viewing PDF files in Adobe Reader, Document Cloud, Adobe Acrobat, and other PDF editing programs is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code related to the...

RHEL 6 : mysql (RHSA-2017:0184)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0184 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and...

Hack the Army Bounty Pays Out $100,000

The U.S. Army on Thursday shared the outcome of its first bug bounty, which concluded a three-week trial on Dec. 21, calling the program a success. The Hack The Army bounty, announced last fall, was the second such government rewards program, debuting months after the conclusion of the Hack the...

CVE-2016-6286

The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTPPROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server also known as a "httpoxy" attack. This affects all...

MS12-021: Description of the security update for Visual Studio 2010 Service Pack 1: March 13, 2012

MS12-021: Description of the security update for Visual Studio 2010 Service Pack 1: March 13, 2012 Introduction Microsoft has released the security bulletin MS12-021. You can view the complete security bulletin by visiting one of the following Microsoft websites: Home users:...

MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: September 9, 2014

MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: September 9, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow denial of service if an...

CVE-2016-4288

A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary programs with SYSTEM privileges...

Privilege escalation

A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary programs with SYSTEM privileges...

CVE-2016-4288

A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary programs with SYSTEM privileges...

CVE-2016-4288

A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary programs with SYSTEM privileges...

Debian DLA-769-1 : shutter security update

The feature-rich screenshot program shutter uses the system call in an unsafe way. This allows an attacker to execute arbitrary programs via crafted directory names. For Debian 7 'Wheezy', this problem has been fixed in version 0.88.3-1+deb7u1. For Debian 8 'Jessie', this problem will be fixed in...

[SECURITY] [DLA 769-1] shutter security update

Package : shutter Version : 0.88.3-1+deb7u1 CVE ID : CVE-2015-0854 Debian Bug : 798862 The feature-rich screenshot program shutter uses the system call in an unsafe way. This allows an attacker to execute arbitrary programs via crafted directory names. For Debian 7 "Wheezy", this problem has been...

Four New Normals for 2017

Let’s not talk about cybersecurity predictions for 2017. Let’s talk instead about new normals, things that have ceased to be novel because, well, they happen all the time and everywhere. Let’s concede that things such as greedy ransomware, imposing IOT botnets, high-profile bug bounties and...

[SECURITY] Fedora 25 Update: nagios-plugins-2.1.4-2.fc25

Nagios is a program that will monitor hosts and services on your network, and to email or page you when a problem arises or is resolved. Nagios runs on a Unix server as a background or daemon process, intermittently running checks on various services that you specify. The actual service checks ar...

[SECURITY] Fedora 25 Update: community-mysql-5.7.17-1.fc25

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

Apport 2.x (Ubuntu Desktop 12.10 < 16.04) - Local Code Execution Exploit

Exploit for linux platform in category local exploits Both of these issues were reported to the Apport maintainers and a fix was released on 2016-12-14. The CrashDB code injection issue can be tracked with CVE-2016-9949 and the path traversal bug with CVE-2016-9950. An additional problem where...

Apport 2.x (Ubuntu Desktop 12.10 16.04) - Local Code Execution

Apport 2.x Ubuntu Desktop 12.10 16.04 - Local Code Execution Both of these issues were reported to the Apport maintainers and a fix was released on 2016-12-14. The CrashDB code injection issue can be tracked with CVE-2016-9949 and the path traversal bug with CVE-2016-9950. An additional problem...