8772 matches found
Linux Foundation Badge Program Boost Open Source Security
The Linux Foundation says a new Core Infrastructure Initiative CII Best Practices Badge program launched Tuesday will help companies interested in adopting open source technologies evaluate projects based on security, quality and stability. The CII Best Practices Badge does not issue certificates...
Mozilla Firefox / Thunderbird DLL Hijacking
Hi @ll despite better knowledge and MULTIPLE bug/vulnerability reports see , , , ... Mozilla continues to ship Firefox and Thunderbird for Windows with a vulnerable executable installer. Proof of concept/demonstration: 1. visit , download and save it as ShimEng.dll in your "Downloads" folder, the...
Platinum APT Group Abuses Windows Hotpatching
An obscure Windows feature known as hotpatching, missing in the OS since the introduction of Windows 8, is a preferred tool used by a resourced attack group called Platinum that was uncovered by Microsoft. The group has carried out targeted attacks in South and Southeast Asia since at least 2009,...
Uber: Stored self-XSS at m.uber.com
There is a stored self-XSS vulnerability at m.uber.com in displaying the uber invite code. If the user sets the invite code at alertdocument.domain value using the main personal area at the uber.com and then signs into the m.uber.com the XSS is fired. Possible other user exploitation case can be...
New Downloader for Locky
Through DTI Intelligence analysis, We have been observing Locky malware rise to fame recently. Locky is ransomware that is aggressively distributed via downloaders attached in spam emails, and it may have surpassed the Dridex banking trojan in popularity. In previous campaigns, the ransomware was...
Misunderstanding APT Indicators of Compromise
Threatpost Op-Ed is a regular feature where experts contribute essays and commentary on what’s happening in security and privacy. Today’s contributors are Dave Dittrich and Katherine Carpenter. Reports of APT activities detail compromises spanning multiple organizations, sectors, industry...
WPS Office Man-in-the-Middle Attack Vulnerability in Android Version
WPS Office is an office software suite developed independently by Kingsoft Corporation. There is a man-in-the-middle attack vulnerability in WPS Office for Android, where the software does not verify the validity of the TLS certificate when submitting a login request, which can lead to a...
HackerOne: Manipulate report timeline activity by using null byte.
Null bytes are not permitted in report body, or even in report title. But that can be used in the comment section of self-closing for reporter and change-status for team. When a null byte is used as a comment, that report timeline activity disappears! For example:...
Cherish.com Android APP Man-in-the-Middle Attack Vulnerability
Cherish.com is a matchmaking site. A man-in-the-middle attack vulnerability exists in the Zhenai.com Android APP, where the software does not verify the validity of the TLS certificate when logging in, resulting in a man-in-the-middle that can use self-signed certificates to carry out an attack,...
IBM DB2 10.5 < Fix Pack 7 Multiple Vulnerabilities
Binary data 9200.prm...
Meet The Cryptoworm, The Future of Ransomware
Ransomware is evolving and soon will share the same deadly efficiencies as notorious worms of the past, such as Conficker and SQL Slammer. In fact, according to security researchers at Cisco Talos, today’s newest ransomware, SamSam, is a harbinger of a new wave of more malicious, tenacious and...
Security Bypass Vulnerabilities in Multiple McAfee Products
McAfee Active Response MAR is a product of McAfee, Inc. and is a suite of endpoint threat detection and response solutions. McAfee Agent MA is a client component that provides secure communication between ePolicy Orchestrator antivirus management platform and managed products. McAfee Data Loss...
CVE-2016-3984
The McAfee VirusScan Console mcconsol.exe in McAfee Active Response MAR before 1.1.0.161, Agent MA 5.x before 5.0.2 Hotfix 1110392 5.0.2.333, Data Exchange Layer 2.x DXL before 2.0.1.140.1, Data Loss Prevention Endpoint DLPe 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Device Control MDC 9.3...
FreeBSD : py-djblets -- Self-XSS vulnerability (df328fac-f942-11e5-92ce-002590263bf5)
Djblets Release Notes reports : A recently-discovered vulnerability in the datagrid templates allows an attacker to generate a URL to any datagrid page containing malicious code in a column sorting value. If the user visits that URL and then clicks that column, the code will execute. The cause of...
Selbstuntersuchung der Brust - External URLs, MIT license, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Selbstuntersuchung der Brust published at the 'play' market has multiple vulnerabilities...
Depression CBT Self-Help Guide - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Depression CBT Self-Help Guide published at the 'play' market has multiple vulnerabilities...
Open Source GPS Tracking System: Traccar
Traccar is an open source GPS tracking system for various GPS tracking devices. This Maven Project is written in Java and works on most platforms with installed Java Runtime Environment. System supports more than 80 different communication protocols from popular vendors. It includes web interface...
npm fails to restrict the actions of malicious npm packages
Overview npm allows packages to take actions that could result in a malicious npm package author to create a worm that spreads across the majority of the npm ecosystem. Description npm is the default package manager for Node.js, which is a runtime environment for developing server-side web...
