144 matches found
MGASA-2015-0319 Updated php packages fix security vulnerabilities
The php package has been updated to version 5.5.28, which fixes several security issues and other bugs. See the upstream ChangeLog for more details...
SUSE-SU-2015:1264-1 Security update for postgresql93
PostgreSQL was updated to the security and bugfix release 9.3.8 including 9.3.7. Security issues fixed: CVE-2015-3165, bsc931972: Avoid possible crash when client disconnects just before the authentication timeout expires. CVE-2015-3166, bsc931973: Consistently check for failure of the printf...
Owning Internet Printing - A Case Study in Modern Software Exploitation
Guest posted by Neel Mehta [email protected] - June 19th, 2015 Abstract Modern exploit mitigations draw attackers into a game of diminishing marginal returns. With each additional mitigation added, a subset of software bugs become unexploitable, and others become difficult to exploit, requiring...
Many Drug Pumps Open to Variety of Security Flaws
In April, a security researcher disclosed a litany of severe vulnerabilities in the PCA3 drug-infusion pump manufactured by a company named Hospira. He went so far as to call the pump “the least secure IP enabled device I’ve ever touched in my life.” As it turns out, those same vulnerabilities...
MGASA-2015-0166 Updated libksba packages fix security vulnerabilities
The libksba package has been updated to version 1.3.3, which fixes an integer overflow in the DN decoder and a couple of other minor bugs...
MGASA-2014-0506 Updated mediawiki packages fix security vulnerabilies
In MediaWiki before 1.23.7, a missing CSRF check could allow reflected XSS on wikis that allow raw HTML CVE-2014-9276. MediaWiki's mangling, in MediaWiki before 1.23.7, could allow an article editor to inject code into API consumers that blindly unserialize PHP representations of the page from th...
MGASA-2014-0424 Updated mariadb packages fix security vulnerabilities
This update provides MariaDB 5.5.40, which fixes several security issues and other bugs...
Seagate BlackArmor NAS - Multiple Vulnerabilities
Seagate BlackArmor NAS - Multiple Vulnerabilities Exploit Title: Seagate BlackArmor NAS Multiple Vulnerabilities Date: 2/17/14 Exploit Author: Shayan Sadigh twitter.com/r1pplex | Vendor Homepage: http://www.seagate.com/external-hard-drives/network-storage/ Version: All BlackArmor NAS devices...
MGASA-2014-0066 Updated ffmpeg packages fix several security vulnerabilities
Updated ffmpeg packages fix security vulnerabilities: This updates provides ffmpeg version 1.1.8, which fixes several unspecified security vulnerabilities and other bugs which were corrected upstream...
Stealing PIN Codes With a Wink and a Nod
Security researchers have developed a number of different methods to steal or bypass the passcodes on most of the common mobile phone platforms, some of which rely on software bugs and others that are simple social engineering techniques. Now, a pair of researchers from the University of Cambridg...
MGASA-2013-0220 Updated owncloud package fixes security vulnerabilities
XSS vulnerability in "Share Interface" oC-SA-2013-029. Authentication bypass in "userwebdavauth" oC-SA-2013-030. This update provides OwnCloud 5.0.9, which fixes these issues, as well as several other bugs...
Google raises Hackers bounties to $20,000
Google raises Hackers bounties to $20,000 Google on Monday raised to $20,000 its bounty on software bugs that hackers could exploit for cyber attacks on the Internet giant's online services. The maximum reward for exposing a vulnerability that would let an intruder's code get up to mischief in a...
Apple Crash Reports Help Hackers to create a jailbreak exploit
Apple Crash Reports Help Hackers to create a jailbreak exploit iPhone "jailbreaking" has been a hot topic since Apple released its smartphone more than two years ago. According to the Latest report posted by BBC that Thousands of iPhone owners have joined forces with a team of hackers to help the...
XSS in the Widget Connector
I've been working with the widget connector today and reading through the code when I noticed that the media uris are not being handled securely. try this: widget:url=youtube.com/v="alert'xss' In general there is not a unified way to prevent issues like this in the widget extensions and it is up ...
Multiple vulnearabilities in e107 cms
Software: http://www.e107.org Author: Heintz Advisory origin: http://www.waraxe.us Software bugtracker: http://e107.org/e107plugins/bugtracker2/bugtracker2.php?0.bug.558 e107 v 0.617 search.php line 142 if$POST'searchquery' echo "div...
Alt-N WebAdmin MDaemon/RelayFax administration tool multiple bugs
Crossit scripting, user accounts editing, code execution...
Multiple Real products multiple bugs
RealPlayer ActiveX 'ShowPreferences' Buffer Overflow Vulnerability. Malcrafted RMP files arbitrary files deletion...
Multiple Kazaa P2P agent sig2dat protocol bugs
Integer overflow, directory traversal...