Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the linux-headers-2.6.26-2-footbridge package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the enterprise automation system 1C:Enterprise, which allows a malicious individual to cause service failures

The 1C:Enterprise system contains a vulnerability in the Fast Infoset decoder of the xml2.dll library, which is used for working with XML documents. A malicious individual can manipulate input data, causing the Fast Infoset decoder to become in the EIIINDEXLARG state. This allows them to send an...

CVE-2016-2207

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

CVE-2016-2207

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

Design/Logic Flaw

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

CVE-2016-2207

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

CVE-2016-3646

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

Mobile Advertising Firm Found Tracking Users To Pay $950K

After settling charges with the Federal Trade Commission this week a mobile advertising company will pay nearly $1M after it was determined the company tracked customers – including children – without their consent. InMobi, an India-based firm with offices across the world, will pay $950,000 in...

Adobe Flash Player Infinite Recursion Arbitrary Read Access Violation

SUMMARY A potentially exploitable read access violation vulnerability exists in the a way Adobe Flash Player handles infinitely recursive calls. A specially crafted ActionScript code can cause a read access violation which can potentially be further abused. To trriger this vulnerability user...

FBI Wants Biometric Database Exempt From Privacy Rules

Civil liberties and privacy groups are petitioning the U.S. government for more time to fight the FBI’s request to exempt itself from lawsuits related to its warehouse of an estimated 100 million biometric records if it’s found in violation of the federal Privacy Act of 1974. At issue is the...

CCextractor 0.80 Access Violation Crash

Exploit Title: CCextractor 0.80 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Xino.co.uk Vendor Homepage: http://www.ccextractor.org/ Software Link: http://www.ccextractor.org/download-ccextractor.html Version: 0.80 Tested on: Ubuntu 14 LTS CVE : 0 day from subprocess...

TCPDump 4.5.1 Crash Proof Of Concept

Exploit Title: tcpdump 4.5.1 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Vendor Homepage: http://www.tcpdump.org Software Link: http://www.tcpdump.org/release/tcpdump-4.5.1.tar.gz Version: 4.5.1 Tested on: Ubuntu 14 LTS from subprocess import call from shlex import...

TCPDump 4.5.1 - Crash (PoC)

TCPDump 4.5.1 - Crash PoC Exploit Title: tcpdump 4.5.1 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Vendor Homepage: http://www.tcpdump.org Software Link: http://www.tcpdump.org/release/tcpdump-4.5.1.tar.gz Version: 4.5.1 Tested on: Ubuntu 14 LTS from subprocess impor...

TCPDump 4.5.1 - Crash (PoC)

Exploit for linux platform in category dos / poc Exploit Title: tcpdump 4.5.1 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Vendor Homepage: http://www.tcpdump.org Software Link: http://www.tcpdump.org/release/tcpdump-4.5.1.tar.gz Version: 4.5.1 Tested on: Ubuntu 14 LT...

CCextractor 0.80 - Crash (PoC)

CCextractor 0.80 - Crash PoC Exploit Title: CCextractor 0.80 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Xino.co.uk Vendor Homepage: http://www.ccextractor.org/ Software Link: http://www.ccextractor.org/download-ccextractor.html Version: 0.80 Tested on: Ubuntu 14 LTS...

CCextractor 0.80 - Crash (PoC)

Exploit for linux platform in category dos / poc Exploit Title: CCextractor 0.80 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Xino.co.uk Vendor Homepage: http://www.ccextractor.org/ Software Link: http://www.ccextractor.org/download-ccextractor.html Version: 0.80 Test...

CCextractor 0.80 - Crash (PoC)

Exploit Title: CCextractor 0.80 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Xino.co.uk Vendor Homepage: http://www.ccextractor.org/ Software Link: http://www.ccextractor.org/download-ccextractor.html Version: 0.80 Tested on: Ubuntu 14 LTS CVE : 0 day from subprocess...

TCPDump 4.5.1 - Crash (PoC)

Exploit Title: tcpdump 4.5.1 Access Violation Crash Date: 31st May 2016 Exploit Author: David Silveiro Vendor Homepage: http://www.tcpdump.org Software Link: http://www.tcpdump.org/release/tcpdump-4.5.1.tar.gz Version: 4.5.1 Tested on: Ubuntu 14 LTS from subprocess import call from shlex import...

Facebook Sued for illegally Scanning Users' Private Messages

Facebook is in trouble once again regarding its users' privacy. Facebook is facing a class-action lawsuit in Northern California over allegations that the company systematically scans its users' private messages on the social network without their consent and makes the profit by sharing the data...

Design/Logic Flaw

The kernel component in Symantec Anti-Virus Engine AVE 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denial of service memory access violation and system crash via a malformed PE header file...