Bitdefender: Heap Buffer Overflow via 7z LZMA


A few days after having published the post about the Bitdefender stack buffer overflow via 7z PPMD1, I discovered a new bug in Bitdefender’s product. While this is a 7z bug, too, it has nothing to do with the previous bug or with the PPMD codec. Instead, it concerns dynamic memory management. In contrast to the previous post2, which described an arbitrary free vulnerability in F-Secure’s anti-virus product, this post presents the first heap buffer overflow of this blog series.


https://landave.io/2017/08/bitdefender-heap-buffer-overflow-via-7z-lzma/

Who needs Macros when you have PowerPoint "Mouse Over Actions" 😀😀

Office 2016 -> save as PPS 2003-2007 version.

Apple's .pkg installer app loads unsigned dylibs from /tmp into its trusted (entitled) process context🍎 Non-priv'd local code can hijack ☠️🤷

The Hacker Crackdown is now available online. https://archive.org/details/hypercard_the-hacker-crackdown

Microsoft and Red Hat announces expanded partnership enabling enterprises to more easily adopt containers

http://u.tpx.mx/lolmsrdht

Exploiting Industrial Collaborative Robots http://blog.ioactive.com/2017/08/Exploiting-Industrial-Collaborative-Robots.html

LOL

To bypass all the WAFs & beyond using the request encoding technique: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2017/august/request-encoding-to-bypass-web-application-firewalls/

Salamandra Spy Microphone Detection Tool.

https://github.com/eldraco/Salamandra/blob/master/README.md

the cause : the DNS degradation as a Distributed Denial of Service (DDoS) attack.

Meanwhile, on Pastebin, someone posted 33,000 telnet credentials (yes, TELNET) for IoT devices. pastebin.com/p5teudX0

Usando rand() para decisiones en tu vida cotidiana.

http://bucio.mx/2015/usando-rand-para-decisiones-en-tu-vida-cotidiana.html

LOL

Facebook se encuentra abajo en algunas partes del mundo ..

Puede que sea por mantenimiento

Web Aplication Attack Q2 2017 según Akamai.

WEB ATTACK VISUALIZATION

by akamai.