The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to circumvent existing restrictions and gain access to protected information.

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, are related to deficiencies in access control mechanisms. Exploiting these vulnerabilities can allow attackers to...

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the NSURL component of CFNetwork SSL in the iOS operating system is related to cryptographic transformation errors. Exploiting this vulnerability can allow attackers to gain access to protected information through “man-in-the-middle” attacks and with the use of specially...

Protect Host Media Auto-Exchanger Cross-Site Request Forgery Vulnerability

Protect Host Media Auto-Exchanger is a set of tools for exchanging, buying and selling e-currency from Protect Host Media UK. A cross-site request forgery vulnerability exists in Protect Host Media Auto-Exchanger version 5.1.0, which can be exploited by a remote attacker to change a password by...

Thunderstrike 2 Mac OS X Firmware Worm

A new attack against Intel firmware running in Apple computers is expected to be unveiled at this week’s Black Hat conference. The research is an extension of the Thunderstrike Mac OS X firmware bootkit disclosed this spring that enables the undetectable installation of malicious firmware that...

Facebook Security Checkup Tool Keeps Tabs on Security Settings

Large technology companies have long led their users to security and privacy features. Some security technologies are transparent and are on by default, while others require a little prodding of users to turn them on. Even in an age of enhanced scrutiny of exactly what privacy is and means, and...

WordPress Copy Protect Plugin <= 3.0.0 - Multiple Vulnerabilities

This plugin is prone to cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

X (Formerly Twitter): Privecy Issue : view "Protected users" followers and following

Hi When Twitter user account change his privacy settings =https://twitter.com/settings/security and enable "Protect my Tweets " others users "Not in the Follow list" should Not be able to see the user's follower an following list but I just found out away to see any Protected users" follower an...

ntp -- multiple vulnerabilities

ntp.org reports: Sec 2779 ntpd accepts unauthenticated packets with symmetric key crypto. Sec 2781 Authentication doesn't protect symmetric associations against DoS attacks...

Beware of Skimming Devices Installed on the ATM Vestibule Doors

Despite anti-skimmer ATM Lobby access control system available in the market, we have seen a number of incidents in recent years where criminals used card skimmers at ATM doors. Few years back, cyber criminals started using card skimmers on the door of the ATM vestibule, where customers have to...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3103)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3103 advisory. - ALSA: control: Protect user controls against concurrent access Lars-Peter Clausen Orabug: 20192540 CVE-2014-4652 - target/rd: Refactor...

Ultra Electronics 7.2.0.19 and 7.4.0.7 - Multiple Vulnerabilities

No description provided by source. Ultra Electronics / AEP Networks - SSL VPN Netilla / Series A / Ultra Protect Vulnerabilities http://www.osisecurity.com.au/advisories/ultra-aep-netilla-vulnerabilities Release Date: 02-Oct-2014 Software: Ultra Electronics - Series A...

Ultra Electronics 7.2.0.19 / 7.4.0.7 SQL Injection / Direction Creation

Ultra Electronics / AEP Networks - SSL VPN Netilla / Series A / Ultra Protect Vulnerabilities http://www.osisecurity.com.au/advisories/ultra-aep-netilla-vulnerabilities Release Date: 02-Oct-2014 Software: Ultra Electronics - Series A...

Webradev Download Protect 1.0 - Remote File Inclusion Vulnerabilities

No description provided by source. Webradev Download Protect v1.0 Remote File Inclusion ======================================================== Author : asL-Sabia = = Home : www.v4-Team.com = = email: [email protected] = = = scripts :...

Web Animations Password Protect Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/11073/info Password Protect is reported prone to a multiple cross-site scripting and SQL injection vulnerabilities. These issues occur due to insufficient sanitization of user-supplied input. Successful exploitation of...

InVision: captcha missing

login and go to projects section, choose any project. 2. Click on share, click on 'Password Protect' option and enter any password. 3. Now open new browser and load the link shared. It asks for password. Try 40-50 attempts of wrong passwords, the application doesn't asks for captcha...

Palo Alto Networks PAN-OS 5.0.9 Multiple Vulnerabilities

The remote host is running version 5.0.9 of Palo Alto Networks PAN-OS. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists due to an inability to handle IP packets larger than 1480 bytes through an Active/Active VWire setup. An attacker can exploit...

Buffer overflow

Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service crash via vectors related to a length inconsistency in the cryptopolicysetfromprofileforrtp and srtpprotect functions...

CVE-2013-2139

Removed by vendor...

CFME: GET request CSRF vulnerability

CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protectfromforgery mechanism and conduct cross-site request forgery CSRF attacks via a destructive action in a request...

iPic Sharp v1.2.1 iOS - Persistent Foldername Vulnerability

Document Title: =============== iPic Sharp v1.2.1 iOS - Persistent Foldername Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1031 Release Date: ============= 2013-07-23 Vulnerability Laboratory ID VL-ID: ===================================...