What Are These Odd POP3 (Port 110/tcp) Scans About?, (Mon, Feb 6th)
I am seeing a steady trickle of scans for %%port:110%% against my honeypot. Initially, I believed that the goal was brute forcing e-mail passwords. But instead, when setting up a quick netcat...
View ArticleVuln: iucode-tool CVE-2017-0357 Heap Buffer Overflow Vulnerability
iucode-tool CVE-2017-0357 Heap Buffer Overflow Vulnerability
View ArticleVuln: libXpm CVE-2016-10164 Heap Based Buffer Overflow Vulnerability
libXpm CVE-2016-10164 Heap Based Buffer Overflow Vulnerability
View ArticleVuln: Citrix License Server for Windows and License Server VPX CVE-2017-5571...
Citrix License Server for Windows and License Server VPX CVE-2017-5571 Open Redirect Vulnerability
View ArticleClik here to view.
Malicious Or Not? You decide..., (Mon, Feb 6th)
On of the hardest tasks in security, and probably fundamentally an impossible task is to figure out if something is not malicious. Even the code you wrote yourself, once it exceeds a certain...
View ArticleVuln: libplist Multiple Local Heap Buffer Overflow and Denial-of-Service...
libplist Multiple Local Heap Buffer Overflow and Denial-of-Service Vulnerabilities
View ArticleVuln: SendQuick Entera & Avera SMS Gateway Appliances Multiple Security...
SendQuick Entera & Avera SMS Gateway Appliances Multiple Security Vulnerabilities
View ArticleVuln: Hawtio CVE-2017-2617 Arbitrary File Upload Vulnerability
Hawtio CVE-2017-2617 Arbitrary File Upload Vulnerability
View ArticleClik here to view.
Vizio smart TVs tracked viewers around the clock without consent
Vizio, one of the world's biggest makers of Smart TVs, is paying $2.2 million to settle charges that it collected viewing habits from 11 million devices without the knowledge or consent of the people...
View ArticleVuln: Jenkins CVE-2017-2608 Remote Code Execution Vulnerability
Jenkins CVE-2017-2608 Remote Code Execution Vulnerability
View ArticleVuln: SanaCMS CVE-2017-5882 Cross Site Scripting Vulnerability
SanaCMS CVE-2017-5882 Cross Site Scripting Vulnerability
View ArticleVuln: Spice CVE-2016-9577 Buffer Overflow Vulnerability
Spice CVE-2016-9577 Buffer Overflow Vulnerability
View ArticleVuln: Exponent CMS CVE-2017-5879 SQL Injection Vulnerability
Exponent CMS CVE-2017-5879 SQL Injection Vulnerability
View ArticleVuln: NetApp OnCommand Insight Data Warehouse CVE-2017-5600 Security Bypass...
NetApp OnCommand Insight Data Warehouse CVE-2017-5600 Security Bypass Vulnerability
View ArticleClik here to view.
Dozens of popular iOS apps vulnerable to intercept of TLS-protected data
While developing a tool for evaluating mobile application security, researchers at Sudo Security Group Inc. found out something unexpected. Seventy-six popular applications in Apple's iOS App Store,...
View ArticleFormer NSA contractor may have stolen 75% of TAO’s elite hacking tools
On Monday, The Washington Post reported one of the most stunning breaches of security ever. A former NSA contractor, the paper said, stole more than 50 terabytes of highly sensitive data. According to...
View ArticleISC Stormcast For Tuesday, February 7th 2017...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleBugtraq: [security bulletin] HPESBUX03699 SSRT110304 rev.1 - HP-UX BIND,...
[security bulletin] HPESBUX03699 SSRT110304 rev.1 - HP-UX BIND, Multiple Remote Denial of Service (DoS)
View ArticleVuln: PEAR HTML_AJAX CVE-2017-5677 PHP Object Injection Vulnerability
PEAR HTML_AJAX CVE-2017-5677 PHP Object Injection Vulnerability
View Article