The vulnerability of the `create_cq` and `create_qp` functions in the PVRDMA virtual network adapter emulator for hardware infrastructure emulation software QEMU allows a hacker to induce a service failure.

The vulnerability of the createcq and createqp functions in the PVRDMA virtual network adapter emulator for hardware support in QEMU is related to deficiencies in resource release after the expiration of its useful lifespan. Exploiting this vulnerability can allow an attacker to cause a service...

Valve: ajaxgetachievementsforgame is not guarded for unreleased apps

Due to an access control bug in the 'ajaxgetachievementsforgame' method, a public profile could accidentally expose achievement names, display names, and descriptions for unreleased games. The caller would need to find a player with achievements for the unreleased app...

UBUNTU-CVE-2020-6079

An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker...

Radiohead Dropped 18 Hours of Unreleased Music to Screw Pirates

You can listen to the OK Computer–era tracks right here...

March 22, 2018—KB4088882 (Preview of Monthly Rollup)

None None...

unrar/unrar_fuzzer: Use-of-uninitialized-value in ExtractUnixLink30

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=6412241369825280 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

CVE-2017-16672

An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip session object is created and that call gets rejected before the session itself is fully...

CVE-2016-10511

The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitting man-in-the-middle attackers the ability to view an application-only OAuth client token and potentially enable unreleased Twitter iOS ap...

CVE-2017-8399

PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2match.c, related to a "pattern with very many captures."...

iRECA: Курьер beta (Unreleased) - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application iRECA: Курьер beta Unreleased published at the 'play' market has multiple vulnerabilities...

Control Nova (Unreleased) - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Control Nova Unreleased published at the 'play' market has multiple vulnerabilities...

Kingsoft PDF Exploit Vulnerability

Kingsoft PDF is an office software. Kingsoft PDF has a release reuse vulnerability. As a result of opening the document, the document business processing block there is a business object reference count, resulting in the document object is not released, resulting in memory leakage to form this...

Sony Pictures Scarier Hack — Hackers Leak Scripts, Celebrity Phone Numbers and Aliases

The massive hacking attack against Sony Pictures Entertainment has reached a more scarier phase following another huge leak of sensitive, confidential documents revealing celebrity contact details and upcoming film scripts. The so-called Guardians of Peace GoP group taking responsibility for the...

Cyberoam UTM Multiiple Vulnerabilities

Exploit for hardware platform in category web applications Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and...

Hackers steal Michael Jackson's entire back catalog from Sony

Hackers steal Michael Jackson's entire back catalog from Sony Entertainment giant Sony has confirmed that hackers accessed its systems and compromised Michael Jackson's entire back catalogue, including many unreleased songs. Michael Jackson's entire back catalogue has been stolen by Internet...

Gamers Seek Beta Versions, Download Malware Instead

Tracking the increasingly common use of PC games as an infection vector, researchers at the Microsoft Malware Protection Center MMPC discovered a couple of malicious programs making the rounds on torrent and file sharing sites. Social engineers are disguising their malware by labeling it as the...