2590 matches found
Deriv.com: Leaking Referrer in Reset Password Link
On 12th Dec flex0geek reported that binary.com was leaking password reset tokens through referer headers . At first this sight the report was closed as we had fixed this earlier and our code base seemed fine . Later on the researcher sent a video POC which did show that we were leaking password...
DEBIAN-CVE-2017-17502
ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file...
Fedora 25 : firefox (2017-9a6569beb6)
Updated to the latest version - Firefox 57 Please note that this update is incompatible with many recent Firefox add-ons, please see Fedora Magazine article for details: https://fedoramagazine.org/firefox-57-coming-soon-quantum-leap/ ---- Update to Firefox 57 a.k.a. Quantum This update may break...
Firefox 57 "Quantum" Released – 2x Faster Web Browser
It is time to give Firefox another chance. The Mozilla Foundation today announced the release of its much awaited Firefox 57, aka Quantum web browser for Windows, Mac, and Linux, which claims to defeat Google's Chrome. It is fast. Really fast. Firefox 57 is based on an entirely revamped design an...
The vulnerability of the ReadMATImage function in the coder/mat.c file of the console image editing tool ImageMagick allows a hacker to cause a memory access violation.
The vulnerability of the ReadMATImage function in the coder/mat.c file of the console image editing tool ImageMagick is related to resource management errors. Exploiting this vulnerability may allow an attacker, operating remotely, to cause a loss of access to memory associated with the quantumin...
Chinese Quantum Satellite Sends First ‘Unhackable’ Data to Earth
In what appears to be the world's first quantum satellite transmission, China has successfully sent an "unbreakable" code over a long distance from an orbiting satellite to the Earth, achieving a milestone in the next generation encryption based on "quantum cryptography." In August last year, Chi...
DEBIAN-CVE-2017-11724
The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantuminfo and cloneinfo data structures...
UBUNTU-CVE-2017-11724
The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantuminfo and cloneinfo data structures...
A week in security (July 17 – July 23)
Over the last week, we have covered Play Protect, android’s new security system and how the Dutch police ran Hansa Market after the take down of Alpha Bay, both major players on the Dark Web. We also provided some tips on how to stay cyber safe this summer. We also saw how the Terror exploit kit...
UBUNTU-CVE-2017-10794
When GraphicsMagick 1.3.25 processes an RGB TIFF picture with metadata indicating a single sample per pixel in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode...
Post-Quantum RSA
Interesting research on a version of RSA that is secure against a quantum computer: Post-quantum RSA Daniel J. Bernstein, Nadia Heninger, Paul Lou, and Luke Valenta Abstract: This paper proposes RSA parameters for which 1 key generation, encryption, decryption, signing, and verification are...
PT-2018-19: Authorization Bypass in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200
The specialists of the Positive Research center have detected an Authorization Bypass vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200. Vulnerability allows attackers to bypass authorization using requests to CGI functions. How to fix Use the...
PT-2018-15: Arbitrary Code Execution in Schneider Electric's Modicon Quantum
The specialists of the Positive Research center have detected an Arbitrary Code Execution vulnerability in Schneider Electric's Modicon Quantum. A vulnerability allows attackers to execute arbitrary code, cause a denial of service, or load a malicious firmware via an FTP command used to upgrade t...
PT-2017-3702 · Schneider Electric · Modicon Premium +3
Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon Premium versions affected versions not specified Schneider Electric Modicon Quantum PLC versions affected versions not specified Schneider Electric Modicon M340 versions affected versions not specified Schneider...
PT-2017-3703 · Schneider Electric · Modicon Premium +3
Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon BMXNOR0200 affected versions not specified Schneider Electric Modicon M340 affected versions not specified Schneider Electric Modicon Premium affected versions not specified Schneider Electric Modicon Quantum PLC...
PT-2017-3704 · Schneider Electric · Modicon Premium +3
Name of the Vulnerable Software and Affected Versions: Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 affected versions not specified Description: A buffer overflow issue exists in the web services that process SOAP requests, potentially allowing a remote...
PT-2017-3701 · Schneider Electric · Modicon Premium +3
Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 versions affected versions not specified Schneider Electric Modicon Premium versions affected versions not specified Schneider Electric Modicon Quantum versions affected versions not specified Schneider Electri...
PT-2017-3708
Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon Quantum versions affected versions not specified Description: The issue is related to inadequate access control in the programmable logic controller's software, which could allow a remote attacker to execute arbitra...
