[RHSA-2013:0627-01] Important: thunderbird security update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1===================================================================== Red Hat Security AdvisorySynopsis: Important: thunderbird...
View Article[RHSA-2013:0625-01] Critical: java-1.6.0-ibm security update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1===================================================================== Red Hat Security AdvisorySynopsis: Critical: java-1.6.0-ibm...
View Article[RHSA-2013:0628-01] Moderate: 389-ds-base security and bug fix update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1===================================================================== Red Hat Security AdvisorySynopsis: Moderate: 389-ds-base...
View Article[RHSA-2013:0633-01] Moderate: jbossweb security update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1===================================================================== Red Hat Security AdvisorySynopsis: Moderate: jbossweb...
View ArticleUbuntu 12.10 64bit Local Root
#include <unistd.h>#include <sys/socket.h>#include <linux/netlink.h>#include <netinet/tcp.h>#include <errno.h>#include <linux/if.h>#include...
View ArticlePrivoxy 3.0.20-1 Credential Exposure
Privoxy Proxy Authentication Credential ExposureProduct: PrivoxyProject Homepage: privoxy.orgAdvisory ID: c22-2013-01Vulnerable Version(s): 3.0.20 (and possibly prior)Tested Version: 3.0.20-1 (tested...
View ArticleMetasploit: Honeywell HSC Remote Deployer ActiveX Remote Code Execution
### This file is part of the Metasploit Framework and may be subject to# redistribution and commercial restrictions. Please see the Metasploit# Framework web site for more information on licensing and...
View ArticleExploit Kit Distribution in the Wild
Have you ever wondered which exploit kits are the most prevalent?We have been tracking several exploit kits that we have identified these past few months and it's interesting to see which gets the...
View Article[CVE-2013-1814] Apache Rave exposes User over API
CVE-2013-1814: Apache Rave exposes User over APISeverity: ImportantVendor: The Apache Software FoundationVersions Affected:Rave 0.11 to 0.20Description:Rave returns the full user object, including the...
View ArticleASUS RT-N66U Multiple Vulns
Vulnerable product: ASUS RT-N66UVulnerabilities:- Linux 2.6.22.19- Old libraries and executablesInteresting vulnerabilities:- "Hidden" root$ Samba share- MiniUPnP confirmed listening on "WAN"...
View ArticleMore information about TP-Link backdoor
During the analysis of this TP-Link backdoor, I found other issues, which can be handy when analyzing other devices. Finally the following path leads to remote root exec (useful for debugging...
View ArticleCellVanish™ Prevents Tracking and Spying on Cellular Phones and Smartphones
DALLAS--(BUSINESS WIRE)--Vanishing Solutions, Inc. has developed the unique and easy-to-use CellVanish cellular phone and smartphone cases to combat illegal activities including identity theft and...
View ArticleEZShield Debuts Identity Protection Application for Mobile Devices
PALO ALTO, Calif.--(BUSINESS WIRE)--EZShield©, a leader in identity management solutions, today announced EZShield DashAccess, a new mobile application that helps to protect the identities of...
View ArticleEC Consult SA-20130313-0 :: QlikView Desktop Client Integer Overflow
SEC Consult Vulnerability Lab Security Advisory < 20130313-0 >======================================================================= title: QlikView Desktop Client Integer Overflow product:...
View ArticleLinux Kernel 'SCTP_GET_ASSOC_STATS()' - Stack-Based Buffer Overflow
#include <stdio.h>#include <string.h>#include <netinet/in.h>#include <sys/socket.h>#define SCTP_GET_ASSOC_STATS 112#define SOL_SCTP 132int main(void){ char *buf =...
View Article[ MDVSA-2013:022 ] openssh
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory...
View Article[RHSA-2013:0643-01] Critical: flash-plugin security update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1===================================================================== Red Hat Security AdvisorySynopsis: Critical: flash-plugin...
View Article[ MDVSA-2013:023 ] coreutils
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory...
View Article[RHSA-2013:0636-01] Important: rhev-hypervisor6 security and bug fix update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1===================================================================== Red Hat Security AdvisorySynopsis: Important:...
View ArticleYou Only Click Twice: FinFisher’s Global Proliferation
Authors: Morgan Marquis-Boire, Bill Marczak, Claudio Guarnieri, and John Scott-Railton.This post describes the results of a comprehensive global Internet scan for the command and control servers of...
View Article