pr DevExpress ASP.NET File Manager 13.2.8 Directory Traversal By packetstormsecurity.com Published On :: Thu, 05 Jun 2014 20:59:44 GMT DevExpress ASP.NET File Manager versions 10.2 through 13.2.8 suffer from a directory traversal vulnerability. Full Article
pr AfterLogic WebMail Pro ASP.NET Account Takeover / XXE Injection By packetstormsecurity.com Published On :: Tue, 24 May 2016 15:37:56 GMT AfterLogic WebMail Pro ASP.NET versions prior to 6.2.7 suffer from an administrator account takeover via an XXE injection vulnerability. Full Article
pr New Magecart Skimmers Practice Steganography By packetstormsecurity.com Published On :: Sat, 04 Jan 2020 16:06:37 GMT Full Article headline malware bank cybercrime fraud
pr Adobe Announces 25 Bug Fixes, 21 In Acrobat Products By packetstormsecurity.com Published On :: Wed, 11 Dec 2019 16:44:02 GMT Full Article headline flaw adobe patch
pr Microsoft To Employ California's Digital Privacy Law Nationwide By packetstormsecurity.com Published On :: Tue, 12 Nov 2019 15:24:20 GMT Full Article headline privacy microsoft usa
pr Microsoft Fixes Exploited Privilege Escalation Flaw, 34 More Bugs By packetstormsecurity.com Published On :: Wed, 11 Dec 2019 16:44:06 GMT Full Article headline microsoft flaw patch
pr U.S. Military Tests Missile Previously Banned Under Treaty By packetstormsecurity.com Published On :: Fri, 13 Dec 2019 15:07:23 GMT Full Article headline government usa russia military
pr Advanced Hackers Are Infecting IT Providers To Get At Customers By packetstormsecurity.com Published On :: Thu, 19 Sep 2019 14:54:56 GMT Full Article headline hacker malware backdoor
pr Federally Funded Unimax Smartphone Preloaded With Malware By packetstormsecurity.com Published On :: Mon, 13 Jan 2020 15:35:45 GMT Full Article headline government usa phone china cyberwar backdoor
pr CES Surveillance Hype Worries Privacy Advocates By packetstormsecurity.com Published On :: Tue, 14 Jan 2020 15:50:34 GMT Full Article headline government privacy usa fraud spyware backdoor
pr IBM Scientists Unveil Racetrack Memory Chip Prototype By packetstormsecurity.com Published On :: Tue, 06 Dec 2011 15:58:38 GMT Full Article headline ibm science
pr IBM Open Sources New Approach To Crypto By packetstormsecurity.com Published On :: Fri, 03 May 2013 14:50:23 GMT Full Article headline ibm cryptography
pr IG Report Says FBI Justified In Starting Russia Probe, Barr Disagrees By packetstormsecurity.com Published On :: Tue, 10 Dec 2019 14:57:50 GMT Full Article headline government usa russia fraud cyberwar fbi
pr Secret Judge Orders FBI To Reform FISA Process By packetstormsecurity.com Published On :: Wed, 18 Dec 2019 13:57:14 GMT Full Article headline government privacy usa fbi
pr FBI Program Offers Companies Data Protection Via Deception By packetstormsecurity.com Published On :: Sat, 21 Dec 2019 06:48:46 GMT Full Article headline government usa fraud fbi
pr FBI Says Cybercrime Profits Reached $3.5 Billion In 2019 By packetstormsecurity.com Published On :: Wed, 12 Feb 2020 18:13:50 GMT Full Article headline cybercrime fraud fbi
pr US Slams Vietnam Censorship Despite PRISM Hypocrisy By packetstormsecurity.com Published On :: Tue, 06 Aug 2013 14:48:23 GMT Full Article headline government privacy usa vietnam nsa censorship
pr macOS/iOS ImageIO PVR Image Processing Heap Corruption By packetstormsecurity.com Published On :: Fri, 07 Feb 2020 16:07:56 GMT macOS and iOS have an ImageIO heap corruption issue when processing malformed PVR images. Full Article
pr macOS/iOS ImageIO PVR Processing Out-Of-Bounds Read By packetstormsecurity.com Published On :: Fri, 07 Feb 2020 16:08:57 GMT macOS and iOS suffer from an ImageIO out-of-bounds read when processing PVR images. Full Article
pr macOS/iOS IOAccelCommandQueue2::processSegmentKernelCommand() Out-Of-Bounds Timestamp Write By packetstormsecurity.com Published On :: Fri, 07 Feb 2020 16:10:06 GMT macOS and iOS suffers from an out-of-bounds timestamp write in IOAccelCommandQueue2::processSegmentKernelCommand(). Full Article
pr macOS / iOS ImageIO OpenEXR Image Processing Memory Issues By packetstormsecurity.com Published On :: Mon, 02 Mar 2020 19:19:48 GMT macOS and iOS have a vulnerability with ImageIO where memory safety issues occur when processing OpenEXR images. Full Article
pr ProficySCADA For iOS 5.0.25920 Denial Of Service By packetstormsecurity.com Published On :: Sun, 22 Mar 2020 14:22:22 GMT ProficySCADA for iOS version 5.0.25920 suffers from a denial of service vulnerability. Full Article
pr AirDisk Pro 5.5.3 Persistent Cross Site Scripting By packetstormsecurity.com Published On :: Wed, 15 Apr 2020 18:39:20 GMT AirDisk Pro version 5.5.3 for iOS suffers from multiple persistent cross site scripting vulnerabilities. Full Article
pr School ERP Pro 1.0 Arbitrary File Read By packetstormsecurity.com Published On :: Wed, 29 Apr 2020 15:33:09 GMT School ERP Pro version 1.0 suffers from an arbitrary file read vulnerability. Full Article
pr Quantum Processor's Prime Feat Raises Security Issues By packetstormsecurity.com Published On :: Wed, 29 Aug 2012 04:41:13 GMT Full Article headline flaw science rsa
pr John McAfee Announces He's Running For President By packetstormsecurity.com Published On :: Wed, 09 Sep 2015 05:35:06 GMT Full Article headline government usa mcafee
pr Ubiquiti Networks UniFi Cloud Key Command Injection / Privilege Escalation By packetstormsecurity.com Published On :: Thu, 27 Jul 2017 18:22:22 GMT Ubiquiti Networks UniFi Cloud Key with firmware versions 0.5.9 and 0.6.0 suffer from weak crypto, privilege escalation, and command injection vulnerabilities. Full Article
pr Primefaces 5.x Remote Code Execution By packetstormsecurity.com Published On :: Thu, 18 Jan 2018 20:56:41 GMT This Metasploit module exploits an expression language remote code execution flaw in the Primefaces JSF framework. Primefaces versions prior to 5.2.21, 5.3.8 or 6.0 are vulnerable to a padding oracle attack, due to the use of weak crypto and default encryption password and salt. Full Article
pr Facebook's New Privacy Tool Lets You Manage How You're Tracked By packetstormsecurity.com Published On :: Tue, 28 Jan 2020 15:39:48 GMT Full Article headline privacy facebook social
pr Russian Disinformation Ongoing Problem, Says FBI Chief By packetstormsecurity.com Published On :: Thu, 06 Feb 2020 17:27:36 GMT Full Article headline government usa russia fraud cyberwar facebook social fbi
pr Linux Password Protected Bindshell Shellcode By packetstormsecurity.com Published On :: Fri, 24 Apr 2020 14:33:25 GMT 272 bytes small Linux/x86_64 null free password protected bindshell shellcode. Full Article
pr CloudFlare Probes Mystery Interception Of Site Traffic Across India By packetstormsecurity.com Published On :: Thu, 14 Jul 2016 14:30:56 GMT Full Article headline privacy india
pr Google's Bug Bounty Program Just Had A Record-Breaking Year Of Payouts By packetstormsecurity.com Published On :: Wed, 29 Jan 2020 15:36:03 GMT Full Article headline hacker flaw google
pr $100k Paid Out For Google Cloud Shell Root Compromise By packetstormsecurity.com Published On :: Fri, 13 Mar 2020 14:49:12 GMT Full Article headline hacker flaw google
pr Penitent Romanian Hacker Aims To Protect World's ATMs By packetstormsecurity.com Published On :: Sun, 19 May 2013 05:46:28 GMT Full Article headline hacker bank romania
pr Guccifer Charged By US Over President Hacks By packetstormsecurity.com Published On :: Fri, 13 Jun 2014 13:29:15 GMT Full Article headline hacker government usa data loss romania
pr Romanian CCTV Ransomware Culprit Admits Guilt By packetstormsecurity.com Published On :: Fri, 21 Sep 2018 15:12:38 GMT Full Article headline government malware usa fraud romania
pr AV Arcade Pro 5.4.3 Cookie Manipulation By packetstormsecurity.com Published On :: Sat, 15 Oct 2011 23:46:31 GMT AV Arcade Pro version 5.4.3 suffers from an insecure cookie vulnerability that allows for access bypass. Full Article
pr NICE Recording eXpress 6.x Root Backdoor / XSS / Bypass By packetstormsecurity.com Published On :: Fri, 30 May 2014 03:10:28 GMT NICE Recording eXpress versions 6.0.x, 6.1.x, 6.2.x, 6.3.x, and 6.5.x suffer from cross site scripting, root backdoor, unauthenticated access, fail authorization, insecure cookie handling, and remote SQL injection vulnerabilities. Full Article
pr Latest Java Zero-Day Linked To Bit9 Compromise By packetstormsecurity.com Published On :: Sat, 02 Mar 2013 23:25:27 GMT Full Article headline hacker flaw symantec java
pr Symantec Finds Malware Widespread On Google Play Market By packetstormsecurity.com Published On :: Wed, 03 Apr 2013 04:10:50 GMT Full Article headline malware phone google symantec
pr Symantec Flaws As Bad As It Gets, Claims Google's Project Zero By packetstormsecurity.com Published On :: Thu, 30 Jun 2016 02:19:04 GMT Full Article headline flaw google symantec backdoor
pr Flaws Found In Security Products AVG, Symantec, And McAfee By packetstormsecurity.com Published On :: Wed, 20 Jul 2016 16:36:21 GMT Full Article headline malware virus flaw symantec mcafee
pr 88 Cisco Products Affected By FragmentSmack By packetstormsecurity.com Published On :: Wed, 26 Sep 2018 16:24:18 GMT Full Article headline linux denial of service flaw cisco
pr Cisco Tackles SD-WAN Root Privilege Vulnerability By packetstormsecurity.com Published On :: Thu, 19 Mar 2020 15:12:51 GMT Full Article headline flaw patch cisco
pr Symantec Endpoint Protection Race Condition By packetstormsecurity.com Published On :: Tue, 05 May 2020 20:55:07 GMT Symantec Endpoint Protection versions 14.2.5323.2000, 14.2.5569.2100, and 14.2.5587.2100 suffer from a race condition vulnerability. Full Article
pr Venmo Transaction Scraped In Privacy Warning To Consumers By packetstormsecurity.com Published On :: Tue, 18 Jun 2019 15:59:58 GMT Full Article headline privacy bank cybercrime data loss fraud flaw paypal
pr Microsoft Windows 7 Build 7601 (x86) Local Privilege Escalation By packetstormsecurity.com Published On :: Fri, 26 Jul 2019 03:22:22 GMT Microsoft Windows 7 Build 7601 (x86) local privilege escalation exploit. Full Article
pr Plantronics Hub SpokesUpdateService Privilege Escalation By packetstormsecurity.com Published On :: Wed, 15 Jan 2020 17:07:53 GMT The Plantronics Hub client application for Windows makes use of an automatic update service SpokesUpdateService.exe which automatically executes a file specified in the MajorUpgrade.config configuration file as SYSTEM. The configuration file is writable by all users by default. This module has been tested successfully on Plantronics Hub version 3.13.2 on Windows 7 SP1 (x64). This Metasploit module has been tested successfully on Plantronics Hub version 3.13.2 on Windows 7 SP1 (x64). Full Article
pr Windscribe WindscribeService Named Pipe Privilege Escalation By packetstormsecurity.com Published On :: Wed, 05 Feb 2020 18:54:05 GMT The Windscribe VPN client application for Windows makes use of a Windows service WindscribeService.exe which exposes a named pipe \.pipeWindscribeService allowing execution of programs with elevated privileges. Windscribe versions prior to 1.82 do not validate user-supplied program names, allowing execution of arbitrary commands as SYSTEM. This Metasploit module has been tested successfully on Windscribe versions 1.80 and 1.81 on Windows 7 SP1 (x64). Full Article
