Security update for pidgin (important)

This update for pidgin to version 2.12.0 fixes the following issues: This security issue was fixed: - CVE-2017-2640: Out of bounds memory read in purplemarkupunescapeentity boo1028835. These non-security issues were fixed: + libpurple: - Fix the use of uninitialised memory if running...

Generalized SQL Injection Vulnerability in Beijing Zixin Newspaper Communication Technology Digital Newspaper System

Beijing Purple New Digital Newspaper System is a perfect, efficient, stable, reliable, flexible and scalable digital workflow management system for combined editions. A generic SQL injection vulnerability exists in the Beijing Purple New Newspaper Technology Digital Newspaper System, which allows...

Purple Crystal Kika keyboard - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Purple Crystal Kika keyboard published at the 'play' market has multiple vulnerabilities...

USB Killer v2.0 — Latest USB Device that Can Easily Burn Your Computer

Remember Killer USB?? In March, a Russian security researcher devised a weird USB stick that is capable of destroying sensitive components of a computer when plugged-in. Now, the same researcher, nicknamed Dark Purple, has launched a new version of his computer-frying USB Killer pendrive – USB...

Generalized SQL Injection Vulnerability in Name Parameter of Beijing Zixin Newspaper Technology Digital Newspaper System

Beijing Purple New Digital Newspaper System is a perfect, efficient, stable, reliable, flexible and scalable digital workflow management system for combined editions. A generic SQL injection vulnerability exists in the name parameter of the Beijing Purple New Newspaper Technology Digital Newspape...

FireFox file stealing 0day vulnerability has been hacked“real”use, the official emergency release to fix patch-bug warning-the black bar safety net

In Russia a web site, the researchers found a Firefox serious 0day exploits program Exp code, you can steal Windows and Linux users on the computer file. This security event is forcing Mozilla to the official emergency release patch. Vulnerability description The vulnerability is caused by the...

Remote Command Execution Vulnerability in Some Versions of Purple Firewall

Taking into account the development trend of the global information industry and the characteristics of its own advantageous business, ZiGuang focuses its corporate strategy on the field of IT services, and is committed to building a complete and powerful "cloud-network-terminal" industry chain,...

Yahoo! PH Purple Hunt 2.0 Ad Compromised !

Yahoo! PH Purple Hunt 2.0 Ad Compromised ! Earlier the other day, I was browsing through the Yahoo! PH site and the Yahoo! Purple Hunt 2.0 ad caught my attention. Curious as I am, I clicked on the ad and surprisingly my browser downloaded a suspicious file named com.com. Apparently this ad...

Debian DSA-1932-1 : pidgin - programming error

It was discovered that incorrect pointer handling in the purple library, an internal component of the multi-protocol instant messaging client Pidgin, could lead to denial of service or the execution of arbitrary code through malformed contact requests. %NASLMINLEVEL 70300 C Tenable Network...

Unfixed XSS vulnerability at www.royalpurplenews.com

Security researcher Xylitol, has submitted on 25/12/2008 a cross-site-scripting XSS vulnerability affecting www.royalpurplenews.com, which at the time of submission ranked 1374815 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/01/2009. It i...

AMD ATI ATIDSMXX.SYS驱动本地权限提升漏洞

BUGTRAQ ID: 25265 ATIDSMXX.SYS是很多ATI显卡都在使用的驱动程序。 ATIDSMXX.SYS驱动中存在设计问题，本地攻击者可能利用此漏洞获取系统权限。 本地攻击者可以利用一个名为Purple Pill的工具将未签名的驱动写入Vista驱动层，这样包括anti-rootkit/anti-DRM等模块都可以写入Windows Vista受保护的内核，导致完全入侵操作系统。 AMD atidsmxx.sys 3.0.502.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2007-4315

The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by "Purple Pill"...

CVE-2007-4315

The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by "Purple Pill"...

CVE-2007-4315

The CVE-2007-4315 entry concerns the AMD ATI atidsmxx.sys driver (Windows Vista, version 3.0.502.0). The vulnerability description states a local privilege escalation via bypassing driver signing and writing to arbitrary kernel memory locations, enabling privilege gain through unspecified vectors...