Delayed Lock - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Delayed Lock published at the 'play' market has multiple vulnerabilities...

LEGO® 3D Catalogue - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application LEGO® 3D Catalogue published at the 'play' market has multiple vulnerabilities...

Debian DSA-3530-1 : tomcat6 - security update

Multiple security vulnerabilities have been fixed in the Tomcat servlet and JSP engine, which may result on bypass of security manager restrictions, information disclosure, denial of service or session fixation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

The study found: the majority of software vulnerabilities are on the day there is a patch-vulnerability warning-the black bar safety net

Each year, the IT industry a number of manufacturers of a variety of software products in total will find a myriad of vulnerabilities. Software company Flexera Software's computer security research Department of Secunia Research annually publish the vulnerabilities of the assessment report. ! 2 0...

MGASA-2016-0076 Updated gnome-photos packages fix CVE-2013-7447

Updated gnome-photos package fixes security vulnerabilities: Due to a logic error, an attempt to allocate a large block of memory fails in createsurfacefrompixbuf, leading to a crash of gnome-photos CVE-2013-7447. A similar potential issue in viewhelperdraw in src/gegl-gtk-view-helper.c has also...

SUSE-SU-2016:0457-1 Security update for rubygem-actionpack-4_2

This update for rubygem-actionpack-42 fixes the following issues: - CVE-2016-0751: Object Leak DoS bsc963331 - CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes bsc963335 - CVE-2016-0752: directory traversal and information leak in Action View bsc963332 - CVE-2015-7576:...

Microsoft Releases February 2016 Security Bulletin

Microsoft has released 13 updates to address vulnerabilities in Microsoft software. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review Microsoft Security Bulletins MS16-009 through...

MGASA-2016-0047 Updated cgit packages fix security vulnerability

Reflected Cross Site Scripting and Header Injection in Mimetype Query String in cgit before 0.12 CVE-2016-1899. Stored Cross Site Scripting and Header Injection in Filename Parameter in cgit before 0.12 CVE-2016-1900. Integer Overflow resulting in Buffer Overflow in cgit before 0.12 CVE-2016-1901...

Samsung Get Sued for Failing to Update its Smartphones

One of the world's largest smartphone makers is being sued by the Dutch Consumers' Association DCA for its lack in providing timely software updates to its Android smartphones. This doesn't surprise me, though. The majority of manufacturers fail to deliver software updates for old devices for...

Cisco Patches Hardcoded Password, DoS Vulnerabilities in Software

Cisco patched a handful of issues across its software line this week, including two critical vulnerabilities that could lead to the complete compromise of any devices running the software, and a hardcoded password that exists in some access points made by the company. According to security...

Microsoft Releases January 2016 Security Bulletin

Microsoft has released nine updates to address vulnerabilities in Microsoft software. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review Microsoft Security Bulletins MS16-001...

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to circumvent existing restrictions and gain access to protected information.

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow attackers to bypass...

Cisco Prime multiple security vulnerabilities

Restrictions bypass, privilege escalation, information disclosure...

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ChiefPDF Buffer Overflow

!/usr/bin/python Exploit Title:ChiefPDF Software Buffer Overflow vulnerable programs: PDF to Image Converter 2.0 PDF to Image Converter Free 2.0 PDF to Tiff Converter 2.0 PDF to Tiff Converter Free 2.0 Software Link:http://www.soft32.com/publishers/chiefpdf/ Author: metacom - twitter.com/m3tac0m...

SUSE-SU-2015:1484-1 Security update for libwmf

libwmf was updated to fix five security issues. These security issues were fixed: - CVE-2009-1364: Fixed realloc return value usage bsc495842, bnc831299 - CVE-2015-0848: Heap overflow on libwmf0.2-7 bsc933109 - CVE-2015-4588: DecodeImage did not check that the run-length 'count' fits into the tot...

AirLive IP cameras commands injection

Few commands injection possibilities...

CVE-2015-3130

Technical details for CVE-2015-3130 are not provided in the connected documents; please consult official advisories for affected products, impact, and fixes.

Massachusetts Institute of Technology（MIT）invention vulnerabilities automatically repair system-vulnerability warning-the black bar safety net

! In this month's Computer Society programming languages design and implementation Conference on the Association for Computing Machinery's Programming Language Design and Implementation, the MIT researchers demonstrated a new system, it is possible by introducing other, more security of applicati...

Встреча Defcon Moscow #9

3 июля, в пятницу, в офисе Mail.Ru Group состоится девятая встреча Defcon Moscow, которую организует группа DC7499. Defcon Moscow — это открытое и независимое сообщество технических энтузиастов, приближенных к области высоких технологий, а также информационной и технической безопасности. Программ...