Telemarketing Firm Leaks 400,000 Recorded Calls

More than 400,000 audio files associated with a Florida company’s telemarketing efforts were stored online in the clear, and were discovered earlier this month by researchers at MacKeeper. More than 17,600 of those audio recordings were customer transactions that included names, addresses, and...

Many Android VPN Apps Breaking Privacy Promises

An alarming number of Android VPNs are providing a decidedly false sense of security to users, especially those living in areas where communication is censored or technology is crucial to the privacy and physical security. A study published recently identified a number of shortcomings common to...

Microsoft Edge - CBase­Scriptable::Private­Query­Interface Memory Corruption (MS16-068)

Microsoft Edge - CBase­Scriptable::Private­Query­Interface Memory Corruption MS16-068 Source: http://blog.skylined.nl/20161205001.html Synopsis A specially crafted web-page can trigger a memory corruption vulnerability in Microsoft Edge. I did not investigate this vulnerability thoroughly, so I...

mozilla -- data: URL can inherit wrong origin after an HTTP redirect

The Mozilla Foundation reports: Redirection from an HTTP connection to a data: URL assigns the referring site's origin to the data: URL in some circumstances. This can result in same-origin violations against a domain if it loads resources from malicious sites. Cross-origin setting of cookies has...

KLA10909 Security vulnerabilitity in Mozilla Firefox

An unspecified vulnerability was found in Mozilla Firefox 49 and 50. It can be exploited to gain priveleges. Technical details Redirection from HTTP connection to a data:URL assigns the referring of site origin to the data: URL in some cases. Because of that same-origin violations against a domai...

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, allow a perpetrator to trigger service interruptions or execute arbitrary codes.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are due to an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allo...

The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, allow a perpetrator to trigger service interruptions or execute arbitrary codes.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are due to an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allo...

The vulnerability of the Adobe AIR software platform allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the Adobe AIR software platform is related to memory integrity violations. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

SSL/TLS: Policy Check Violations

SSL/TLS Policy Check Violations. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.105780";...

[20170406] - Core - ACL Violations

Inadequate filtering of form contents lead allow to overwrite the author of an article...

Viscomsoft Calendar Active-X 2.0 - Multiple Crashes (PoC)

Viscomsoft Calendar Active-X 2.0 - Multiple Crashes PoC Exploit Title: Viscomsoft Calendar Active-X 2.0 - Multiple Crash PoCs Date: 01-03-2016 Exploit Author: Shantanu Khandelwal Twitter: @shantanu561993 Vendor Homepage: http://www.viscomsoft.com/ Software Link:...

Viscomsoft Calendar Active-X 2.0 - Multiple Crashes (PoC)

Exploit Title: Viscomsoft Calendar Active-X 2.0 - Multiple Crash PoCs Date: 01-03-2016 Exploit Author: Shantanu Khandelwal Twitter: @shantanu561993 Vendor Homepage: http://www.viscomsoft.com/ Software Link: http://www.viscomsoft.com/downloads/calendar.html Version: 2.0 Tested on: Windows XP IE-8 ...

Viscomsoft Calendar Active-X 2.0 - Multiple Crash PoCs

Exploit for windows platform in category dos / poc Exploit Title: Viscomsoft Calendar Active-X 2.0 - Multiple Crash PoCs Date: 01-03-2016 Exploit Author: Shantanu Khandelwal Twitter: @shantanu561993 Vendor Homepage: http://www.viscomsoft.com/ Software Link:...

Microsoft Silverlight Runtime Remote Code Execution (MS16-006: CVE-2016-0034)

A remote code execution vulnerability exists in Microsoft Silverlight. The vulnerability is due to incorrect handling of certain open and close requests that can result in read and write access violations. A remote attacker could exploit this vulnerability by enticing a vulnerable user to open a...

Threat Outbreak Alert RuleID20208: Email Messages Distributing Malicious Software on December 20, 2015

Medium Alert ID: 42801 First Published: 2015 December 21 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20208 may contain the following files: Name |...

Threat Outbreak Alert RuleID19741: Email Messages Distributing Malicious Software on November 28, 2015

Medium Alert ID: 42336 First Published: 2015 November 30 14:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19741 may contain the following files: Name |...

Hackers Can Abuse SAP Apps Connected to SCADA

Much in the same way the Target hackers used a HVAC management system to catapult onto the corporate network, attackers focused on oil and gas and other critical industries may be finding similar openings via enterprise applications such as SAP. Researchers from ERPScan, during last week’s Black...

FreeBSD : Joomla! -- Core - SQL Injection/ACL Violation vulnerabilities (0ebc6e78-7ac6-11e5-b35a-002590263bf5)

The JSST and the Joomla! Security Center report : 20151001 - Core - SQL Injection Inadequate filtering of request data leads to a SQL Injection vulnerability. 20151002 - Core - ACL Violations Inadequate ACL checks in comcontenthistory provide potential read access to data which should be access...

Joomla! -- Core - SQL Injection/ACL Violation vulnerabilities

The JSST and the Joomla! Security Center report: 20151001 - Core - SQL Injection Inadequate filtering of request data leads to a SQL Injection vulnerability. 20151002 - Core - ACL Violations Inadequate ACL checks in comcontenthistory provide potential read access to data which should be access...

Google AdMob filter vulnerabilities, malicious ads sneak into the application-vulnerability warning-the black bar safety net

! There are Android app developers complained, because the official advertising network poorly regulated, resulting in this pollution-free Android application infected with malicious ads. Android app strange is implanted in the third-party advertising From Sydney, two bus the Android app Arrivo a...