DLA-190-1 libgcrypt11 - security update

Bulletin has no description...

53KF某重要站点任意文件读取

简要描述： 详细说明： 网站：tel.53kf.com controller可控 request： GET /external.php?controller=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00web&style=61565627-4006633536-103387129 HTTP/1.1 User-Agent: Mozilla/5.0 Windows; U; Windows NT 6.1; en-US Accept: /...

Jolla Phone URI Spoofing

-------------------------- NSOADV-2015-001 --------------------------- Jolla Phone tel URI Spoofing 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 111 111001 111111111 0 10 111...

Debian DSA-3185-1 : libgcrypt11 - security update

Multiple vulnerabilities were discovered in libgcrypt : - CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite noticeable impact on...

Debian Security Advisory DSA 3185-1 (libgcrypt11 - security update)

Multiple vulnerabilities were discovered in libgcrypt: CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite noticeable impact on...

Debian Security Advisory DSA 3184-1 (gnupg - security update)

Multiple vulnerabilities were discovered in GnuPG, the GNU Privacy Guard: CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite...

CVE-2014-6738

The Maccabi Tel Aviv aka com.monkeytech.maccabi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Maccabi Tel Aviv aka com.monkeytech.maccabi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6738

The Maccabi Tel Aviv aka com.monkeytech.maccabi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6738

The CVE-2014-6738 entry concerns the Maccabi Tel Aviv Android app (com.monkeytech.maccabi) version 1.0, which does not verify X.509 certificates when communicating with SSL servers. The root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and access ...

Opentel Openmairie tel 1.02 Local File Include Vulnerability

No description provided by source. ============================================================ Opentel Openmairie tel 1.02 Local File Include Vulnerability ============================================================ + Opentel Openmairie tel 1.02 Local File Include Vulnerability...

Mobile Charger That Can Power-Up Your Smartphone in 30 Seconds

Going for a meeting or for a party and your Phone's battery discharged? Oops! Yes, I know this happens with most of us once in a day or I can rather say all of us. Smartphones are smart enough but not that smarter as expected keeping in mind today’s lifestyle. Phones are the basic necessity...

Kevin Mitnick joins the Zimperium team

Security firm Zimperium developer of Android app zANTI Android application Toolkit now have World Best Hacker "Kevin Mitnick" in their Team. In a Press Release ,Itzhak "Zuk" Avraham said "Zimperium is honored and excited to announce our newest member of the advisory board, world renowned hacker...

Design/Logic Flaw

The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service device hang via a long tel: URL that triggers a large size for the acceptance dialog...

CVE-2011-3432

CVE-2011-3432 affects Apple iOS up to versions before 5.0, specifically the UIKit Alerts component. A malicious page can trigger a denial of service (device hang) by delivering an excessively long tel: URL that makes the acceptance dialog large. Root cause: an overly large maximum URI/text layout...

openstock/opentel 'dsn[phptype]' Parameter Local File Include Vulnerability

openstock/opentel is prone to a local file-include vulnerability because it fails to properly sanitize user supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may...

Opentel Openmairie tel 1.02 Local File Include Vulnerability

Exploit for php platform in category web applications ============================================================ Opentel Openmairie tel 1.02 Local File Include Vulnerability ============================================================ + Opentel Openmairie tel 1.02 Local File Include Vulnerabili...

Opentel Openmairie tel 1.02 Local File Include Vulnerability

============================================================ Opentel Openmairie tel 1.02 Local File Include Vulnerability ============================================================ + Opentel Openmairie tel 1.02 Local File Include Vulnerability...

Opentel Openmairie tel 1.02 - Local File Inclusion

Opentel Openmairie tel 1.02 - Local File Inclusion ============================================================ Opentel Openmairie tel 1.02 Local File Include Vulnerability ============================================================ + Opentel Openmairie tel 1.02 Local File Include Vulnerability...

Opentel Openmairie tel 1.02 - Local File Inclusion

============================================================ Opentel Openmairie tel 1.02 Local File Include Vulnerability ============================================================ + Opentel Openmairie tel 1.02 Local File Include Vulnerability...