[SECURITY] [DLA 942-1] jbig2dec security update

Package : jbig2dec Version : 0.13-4deb7u2 CVE ID : CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 CVE-2017-7885 Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service application crash or disclosure of sensitive information from process memory, because of an integer...

Facebook Offers a Better Way to Get Back Into Your Locked-Out Apps

At Facebook's F8 conference, the company outlined a refreshing alternative to the bad security questions that plague account recovery across the web. The post Facebook Offers a Better Way to Get Back Into Your Locked-Out Apps appeared first on WIRED...

[SECURITY] [DLA 901-1] radare2 security update

Package : radare2 Version : 0.9-3+deb7u2 CVE ID : CVE-2017-6448 CVE-2017-6448 The dalvikdisassemble function in libr/asm/p/asmdalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact...

psychz.net XSS vulnerability

Vulnerable URL: https://www.psychz.net/client/questions/en/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 193748 VIP website status:| No Check psychz.net SSL connection:| Grade: A...

CVE-2016-6122

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 discloses answers to security questions in a response to authenticated users...

PT-2017-8910

Name of the Vulnerable Software and Affected Versions IBM Kenexa LMS on Cloud versions 13.1 through 13.2.4 Description The issue discloses answers to security questions in a response to authenticated users, potentially compromising the security of user accounts. Recommendations For versions 13.1...

CVE-2016-6122: Exposure of Sensitive Information to an Unauthorized Actor

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 discloses answers to security questions in a response to authenticated users...

Clone Of Oddee Script 1.1.3 SQL Injection

Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/cool-planet-clone-of-oddee/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQ...

Questions and Answers Script 1.1.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/questions-and-answers/ Author: Ihsan Sencan Author Web:...

Clone of Oddee Script 1.1.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/cool-planet-clone-of-oddee/ Author: Ihsan Sencan Author We...

Clone of Oddee Script 1.1.3 - SQL Injection

Clone of Oddee Script 1.1.3 - SQL Injection Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/cool-planet-clone-of-oddee/ Author: Ihsan Sencan Author Web:...

Questions and Answers Script 1.1.3 - id SQL Injection

Questions and Answers Script 1.1.3 - id SQL Injection Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/questions-and-answers/ Author: Ihsan Sencan Author Web:...

Clone of Oddee Script 1.1.3 - SQL Injection

Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/cool-planet-clone-of-oddee/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQ...

CVE-2017-5521

An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote...

Yahoo Challenged on Claims Breach Was State-Sponsored Attack

As challenges mount against Yahoo’s attribution of a massive 2014 data breach to state-sponsored hackers, CISO Bob Lord yesterday confirmed that a cache of 200 million Yahoo accounts marketed this summer in an underground forum is unrelated to the breach. Speaking at the Structure Security...

Yahoo Confirms 500 Million Accounts Were Hacked by 'State Sponsored' Hackers

500 million accounts — that's half a Billion users! That's how many Yahoo accounts were compromised in a massive data breach dating back to 2014 by what was believed to be a "state sponsored" hacking group. Over a month ago, a hacker was found to be selling login information related to 200 millio...

500 Million Yahoo Accounts Stolen By State-Sponsored Hackers

Yahoo says it was the victim of state-sponsored hackers who stole information associated with 500 million accounts. Yahoo CISO Bob Lord said the attack happened on the company’s network in late 2014; he did not name the country responsible. “The account information may have included names, email...

DLA-581-1 libreoffice - security update

Bulletin has no description...

[SECURITY] [DLA 480-1] nss security update

Package : nss Version : 3.14.5-1+deb7u6 CVE ID : CVE-2015-7181 CVE-2015-7182 CVE-2016-1938 CVE-2016-1950 CVE-2016-1978 CVE-2016-1979 This security update fixes serious security issues in NSS including arbitrary code execution and remote denial service attacks. For Debian 7 "wheezy", these problem...

Islamic questions - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Islamic questions published at the 'play' market has multiple vulnerabilities...