The Snappening — Snapchat Hacker Threatens to Leak thousands of Images

The waves of celebrities photos have not yet stopped completely, and a new privacy threat has emerged exposing tens of thousands of private photographs and videos of innocent users are circulating over the Internet. The personal image that are believed to be sent through Snapchat — the ephemeral...

Security Advisory-9 OpenSSL vulnerabilities on Huawei products

This security advisory SA describes the impact of 9 OpenSSL vulnerabilities discovered in third-party software. Vulnerability ID: HWPSIRT-2014-0816 These vulnerabilities are referenced in this document as follows: 1.Information leak in pretty printing functions CVE-2014-3508. A flaw in OBJobj2txt...

SA-CONTRIB-2014-096 - OAuth2 Client - Cross Site Scripting (XSS)

OAuth2 Client is an API support module, enabling other modules to connect to services using OAuth2 authentication. Within its API code the Client class exposes variables in an error message, which originate from a third party source without proper sanitisation thus leading to a Cross Site Scripti...

Several vulnerabilities in extension JobControl (dmmjobcontrol)

It has been discovered that the extension "JobControl" dmmjobcontrol is susceptible to Cross-Site Scripting and SQL Injection. Release Date: September 25, 2014 Bulletin update: October 6, 2014 added CVEs Component Type: Third party extension. This extension is not a part of the TYPO3 default...

CVE-2014-4362

The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID information via a crafted app...

POS Service Confirms Goodwill Breach Lasted 18 Months

Third-party payment vendor C&K Systems released further details this week regarding a breach that affected its systems for 18 months and went on to affect customers who shopped at Goodwill, in addition to two unnamed retailers. The company provided an update on the breach via a press release Mond...

FreeBSD Patches TCP Processing DoS Vulnerability

FreeBSD has patched a denial-of-service vulnerability that could affect a host of third-party packages built atop the UNIX-like operating system. The vulnerability—found in the way FreeBSD processes TCP packets—was discovered by a member of Juniper Networks’ incident response team. FreeBSD’s...

The world's most secure phone Blackphone security issues and vulnerability details-vulnerability warning-the black bar safety net

Blackphone,the carrier-independent and vendor-independent smartphone is stored privacy and let theuserhas direct permissions to the target is created, known as the world's most secure phone. However, the Bluebox security team in testing the phone, found that is not nothing. ! The research team...

VMware ESXi product updates to third party libraries (VMSA-2014-0008)

VMware has updated vSphere third party libraries. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMSA-2014-0008 : VMware vSphere product updates to third-party libraries

a. vCenter Server Apache Struts Update The Apache Struts library is updated to address a security issue. This issue may lead to remote code execution after authentication. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the identifier CVE-2014-0114 to this issue. b...

VMware ESXi updates to third party libraries (VMSA-2014-0008) - Remote Version Check

VMware has updated ESXi third party libraries. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

VMSA-2014-0008:VMware vSphere product updates to third party libraries

VMSA-2014-0008.2 VMware vSphere product updates to third party libraries VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2014-0008.2 VMware Security Advisory Synopsis: VMware vSphere product updates to third party libraries VMware Security Advisory Issue date: 2014-09-09 VMwar...

Facebook Rolling Out Privacy Checkup for Users

Facebook has launched a new tool to help you better manage sharing your information and postings on the social network among your friends and the public at-large. The social networking giant on Thursday rolled out its "Privacy Checkup" tool that will help its more than 1.2 billion users to audit...

Android browser vulnerability Cheetah, 3 6 0, surf, etc. are affected-vulnerability warning-the black bar safety net

It is reported that the vulnerability is exposed after, the black bar safety net vulnerability reporting platform for this vulnerability has been tested, found that the vulnerability can be when a user visits a malicious web site that quietly steal the user the access to the site within the...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: cwtfeedit, euldap, flatmgr, jhopengraphprotocol, kedompdf, lumophpinclude, newspack, sbakronymmanager, staddressma, weeaargooglesitemap,. wtdirectory Release Date: September 02, 2014 Bulletin update: September ...

Advantech WebAccess Vulnerabilities

Advisory ID Internal CORE-2014-0005 1. Advisory Information Title: Advantech WebAccess Vulnerabilities Advisory ID: CORE-2014-0005 Advisory URL:http://www.coresecurity.com/advisories/advantech-webaccess-vulnerabilities Date published: 2014-09-02 Date of last update: 2014-09-01 Vendors contacted:...

OAuth authentication memory vulnerability caution a user identity hijacking-vulnerability warning-the black bar safety net

With OpenSSL, like OAuthOpen Authorizationas a widely used open-source third-party login authentication Protocol, this year also broke a security vulnerability. In the third session of the know the security Forum, from Sina Weibo of the blue di snowball shows Sina as early as year 3 months...

Windows Server IoT/Windows Storage Server — Support Statement

Support Statement At Veeam, we understand that some customers may have hardware that comes pre-installed with Windows Server IoT or Windows Storage Server, and they may want to use these to fill the role of Veeam-product component servers. While Windows Server IoT and Windows Storage Server are...

Researchers to 9 2% The success rate of hijacking the Gmail application-vulnerability warning-the black bar safety net

You from a third party site to download a Wallpaper application, it does not require any permissions, so you figure it won't be the malicious applications. But the University of California, Riverside researchers published a study PDF that does not require any permission the app can also steal you...

Grocery Stores 'Supervalu' and 'Albertsons' Hacked for Credit Card Data

Albertson’s and SuperValu - Two nation’s most popular supermarket store chains announced last weekend that a data breach may have revealed the credit and debit card information of their customers at a number of grocery store locations in more than 18 states. Minnesota-based Supervalu announced...