Debian Security Advisory DSA 3031-1 (apt - security update)

The Google Security Team discovered a buffer overflow vulnerability in the HTTP transport code in apt-get. An attacker able to man-in-the-middle a HTTP request to an apt repository can trigger the buffer overflow, leading to a crash of the http apt method binary, or potentially to arbitrary code...

DLA-58-1 apt - security update

Bulletin has no description...

openSUSE Security Update : samba (openSUSE-SU-2014:1040-1)

"This samba update fixes the following security and non security issues : - Fix winbind service parameter usage; bnc890005. - lib/param: change the default for 'winbind expand groups' to '0'; bnc890008. - Update to 4.1.11. + A malicious browser can send packets that may overwrite the heap of the...

Google Adds Warnings About Deceptive Software to Safe Browsing Service

The Google Safe Browsing service has become an integral part of most of the major browsers, integrating malware alerts, warnings about malicious Web sites and suspicious content. The company has been expanding the capabilities of the service steadily over the last few years, and now Google is...

Georgia Tech Releases BlackForest Threat Intelligence Tool

Enterprises longing for an automated system that sends up a smoke signal that attackers may be planning a move against a particular organization or are promoting a new tool that targets companies in a specific industry may have had their wish come true. Georgia Tech Research Institute has release...

Google to Change Malware, Phishing Warnings

In the not too distant future, Google will change the way it displays malware and phishing warnings in its Chrome browser. Instead of a white warning on a red background, the entire page will be red, with a prominent X featured at the top of the display. Both the malware warning and the phishing...

Cisco IOS 11.x TFTP Server Long File Name Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5328/info A problem has been discovered in Cisco IOS and MGX switches that could result in a denial of service, and potential code execution. It has been discovered that the TFTP server file name handling of Cisco IOS is...

Uebimiau Webmail <= 2.7.2 - Multiple Vulnerabilities.

No description provided by source. Exploit Title: Uebimiau Webmail = 2.7.2 Multiple Vulnerabilities. Date: 13/03/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.comhttp://gmail.com | www.DigitalWhisper.co.ilhttp://www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Test...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection Exploit

No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...

The Uploader 2.0.4 (Eng/Ita) Remote File Upload Remote Code Execution

No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def initializeinfo = superupdateinfoinfo, 'Name' = 'The Uploader 2.0.4 Eng/Ita Remote File Upload', 'Description'= %q This module exploits...

Ancient 'STONED' Virus Signatures found in Bitcoin Blockchain

If you are dealing in cryptocurrency Bitcoin and have Microsoft's Security Essentials MSE installed on your system, then you could be infected by a virus called "DOS/STONED" from the Bitcoin BlockChain. With a number of high-profile cases of fraud, theft, and technical incompetence against the...

Fedora 20 : qemu-1.6.2-4.fc20 (2014-5825)

Fix arm sd warnings with latest kernel bz 1091548 - Fix regression in CVE backport that affects openstack thanks lbezdick - Fix guest startup crashes from autotest bz 1081610 - Block/image format validation CVE-2014-0142 - 2014-0148 bz 1078201, bz 1086710, bz 1079140, bz 1086724, bz 1079240, bz...

Apple iOS 4.2.1 - facetime-audio: Security Bypass

Apple iOS 4.2.1 - facetime-audio: Security Bypass source: https://www.securityfocus.com/bid/66108/info Apple iOS is affected by a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security warnings. This may aid in further attacks. These...

Apple iOS 4.2.1 - 'facetime-audio://' Security Bypass

source: https://www.securityfocus.com/bid/66108/info Apple iOS is affected by a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security warnings. This may aid in further attacks. These issues affect Apple iOS versions prior to 7.1...

Joomla-Base XSS / XML Injection / Denial Of Service

Hello list! These are Denial of Service, XML Injection, Cross-Site Scripting, Full path disclosure and Insufficient Anti-automation vulnerabilities in Joomla-Base. This is package of Joomla with different plugins with their vulnerabilities. These vulnerabilities are in Google Maps plugin for...

Security changes and features of Opera 19

Security Security changes and features of Opera 19 Share January 31st, 2014 Opera 19 is now been put through its paces on the Developer and Next channels, and is now out on the Stable channel. Opera 19 for Android has also recently been released. New features As with every release, each new featu...

kernel security and bug fix update

kernel 2.6.18-371.4.1.0.1 - i386: fix MTRR code Zhenzhong Duan orabug 15862649 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use...

How to Create a Better Malware Warning Through Psychology

It turns out the best way to get people to pay attention to those malware warnings that pop up in browsers may be to stop tweaking them, scrap them entirely and rebuild from scratch. According to a study on the subject published last week, efficient malware warnings shouldn’t scare users away, th...

Apple Safari For Windows - PhishingAlert Security Bypass

source: https://www.securityfocus.com/bid/64543/info Apple Safari for Windows is affected by a security-bypass weakness. Successfully exploiting this issue may allow an attacker to bypass certain security warnings. This may aid in conducting phishing attacks. http://example.com:/@/xsser.me/...

Google Chrome < 31.0.1650.48 Multiple Vulnerabilities (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 31.0.1650.48. It is, therefore, affected by multiple vulnerabilities : - Various, unspecified errors exist. CVE-2013-2931 - Use-after-free errors exist related to speech input elements, media elements, 'id'...