ATENTION‼ New - CVE-2018-16808
📖 Read
via "National Vulnerability Database".
An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-16804
📖 Read
via "National Vulnerability Database".
An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14499
📖 Read
via "National Vulnerability Database".
An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14498
📖 Read
via "National Vulnerability Database".
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14038
📖 Read
via "National Vulnerability Database".
The aout_32_swap_std_reloc_out function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils before 2.31, allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted file, as demonstrated by objcopy.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14038
📖 Read
via "National Vulnerability Database".
The aout_32_swap_std_reloc_out function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils before 2.31, allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted file, as demonstrated by objcopy.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-12447
📖 Read
via "National Vulnerability Database".
GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-7468
📖 Read
via "National Vulnerability Database".
Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-7467
📖 Read
via "National Vulnerability Database".
Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-7466
📖 Read
via "National Vulnerability Database".
Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in the db_type parameter if install.php remains present after installation.📖 Read
via "National Vulnerability Database".
⚠ For sale: Gray-market iPhones that yield secrets to encryption ⚠
📖 Read
via "Naked Security".
The prototype iPhones are slipping out of Apple's supply chain with disabled security, to the delight of researchers and jailbreakers.📖 Read
via "Naked Security".
Naked Security
Developer-only iPhones help reveal Apple’s secret security sauce
The prototype iPhones are slipping out of Apple’s supply chain with disabled security, to the delight of researchers and jailbreakers.
⚠ Windows Calculator is going open source ⚠
📖 Read
via "Naked Security".
Can the combined power of the world’s developers possibly improve the iconic Windows Calculator app? Microsoft seems to think so.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Zuck says Facebook is becoming more “privacy focused” ⚠
📖 Read
via "Naked Security".
Facebook's planning a new, highly integrated platform and talking a lot about encrypted messaging.📖 Read
via "Naked Security".
Naked Security
Zuck says Facebook is becoming more “privacy focused”
Facebook’s planning a new, highly integrated platform and talking a lot about encrypted messaging.
🔐 How to create a transformational cybersecurity strategy: 3 paths 🔐
📖 Read
via "Security on TechRepublic".
Enterprises must build a security strategy that is aligned with business needs.📖 Read
via "Security on TechRepublic".
TechRepublic
How to create a transformational cybersecurity strategy: 3 paths
Enterprises must build a security strategy that is aligned with business needs.
⚠ Firefox picks up advertiser-dodging tech from Tor ⚠
📖 Read
via "Naked Security".
Letterboxing comes straight from the Tor browser, and will help Firefox users avoid advertisers that follow them around the web.📖 Read
via "Naked Security".
Naked Security
Firefox picks up advertiser-dodging tech from Tor
Letterboxing comes straight from the Tor browser, and will help Firefox users avoid advertisers that follow them around the web.
❌ RSA Conference 2019 Recap ❌
📖 Read
via "Threatpost".
From privacy to patches, Threatpost editors discuss the biggest infosec news and trends that they saw this week at RSA Conference 2019.📖 Read
via "Threatpost".
Threat Post
RSA Conference 2019 Recap
From privacy to patches, Threatpost editors discuss the biggest infosec news and trends that they saw this week at RSA Conference 2019.
🔐 Why companies ignore cybersecurity in digital transformations 🔐
📖 Read
via "Security on TechRepublic".
At RSA 2019, Emily Mossburg of Deloitte explained the challenges companies face when it comes to cybersecurity.📖 Read
via "Security on TechRepublic".
TechRepublic
Why companies ignore cybersecurity in digital transformations
At RSA 2019, Emily Mossburg of Deloitte explained the challenges companies face when it comes to cybersecurity.
🔐 Why security is the top barrier in enterprise cloud adoption 🔐
📖 Read
via "Security on TechRepublic".
At RSA 2019, Richard Bird of Ping Identity discussed identity-related security issues and solutions for enterprises.📖 Read
via "Security on TechRepublic".
TechRepublic
Why security is the top barrier in enterprise cloud adoption
At RSA 2019, Richard Bird of Ping Identity discussed identity-related security issues and solutions for enterprises.
❌ RSAC 2019: The Dark Side of Machine Learning ❌
📖 Read
via "Threatpost".
As smart devices permeate our lives, Google sends up a red flag and shows how the underlying systems can be attacked.📖 Read
via "Threatpost".
Threat Post
RSAC 2019: The Dark Side of Machine Learning
As smart devices permeate our lives, Google sends up a red flag and shows how the underlying systems can be attacked.
🔐 Blockchain implementation: Top security risks for the enterprise 🔐
📖 Read
via "Security on TechRepublic".
At RSA 2019, Charles Henderson of IBM X-Force Red explained the cybersecurity challenges involved in bringing blockchain to the enterprise.📖 Read
via "Security on TechRepublic".
TechRepublic
Blockchain implementation: Top security risks for the enterprise
At RSA 2019, Charles Henderson of IBM X-Force Red explained the cybersecurity challenges involved in bringing blockchain to the enterprise.
⚠ Serious Security: When randomness isn’t – and why it matters ⚠
📖 Read
via "Naked Security".
The password 'ji32k7au4a83' looks pretty random and feels as though it should be unique - read this article to find out why it's neither!📖 Read
via "Naked Security".
Naked Security
Serious Security: When randomness isn’t – and why it matters
The password ‘ji32k7au4a83’ looks pretty random and feels as though it should be unique – read this article to find out why it’s neither!