jetlib.sec

Feeds

239366 items (0 unread) in 27 feeds

• 0day.today (was: 1337day, Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Recent items

• August 19, 2018
• 13:00

  Wiring The ESP-32 To Ethernet

   » ‎ Hack a Day

  Since its introduction years ago, the ESP-8266 has taken over the world. It’s the chip inside thousands of different projects, and the basis for dozens of different IoT thingamadoos. The follow-up to the 8266, the ESP-32, is even more capable. It has a ton of peripherals inside, including an Ethernet MAC. What’s that? Yes, it’s possible to put Ethernet on an ESP-32, and give an IoT board PoE. That’s what [Patrick] is doing for his Hackaday Prize project, and it’s an awesome idea.

  This build began as you would expect, with an ESP-32 module attached to one side of a …read more

  Tags:  the hackaday prize  

• 10:00

  Getting Resourceful to Build A Home CNC

   » ‎ Hack a Day

  CNC really is a game changer when it comes to machining. If your motor skills or ability to focus aren’t all there, you don’t need to worry – the computer will handle the manual task of machining for you! These builds are popular for DIYers to undertake, as they enable the production of all manner of interesting and advanced parts at home once they’re up and running. However, parts to build a CNC machine can get spendy; [Brenda] decided to take a recycling-based approach to her build instead (Youtube link).

  The build uses motion parts from an old silicon wafer …read more

  Tags:  cnc hacks  

• 7:00

  [Cody] Builds a Chlorine Machine

   » ‎ Hack a Day

  In his continuing bid to have his YouTube channel demonetized, [Cody] has decided to share how he makes chlorine gas in his lab. Because nothing could go wrong with something that uses five pounds of liquid mercury and electricity to make chlorine, hydrogen, and lye.

  We’ll be the first to admit that we don’t fully understand how the Chlorine Machine works. The electrochemistry end of it is pretty straightforward – it uses electrolysis to liberate the chlorine from a brine solution. One side of the electrochemical cell generates chlorine, and one side gives off hydrogen as a byproduct. We even …read more

  Tags:  chemistry hacks  

• 4:00

  NASA Wants You… to Design Their Robot

   » ‎ Hack a Day

  No one loves a good competition more than Hackaday. We run enough to keep anyone busy. But if you have a little spare time after designing your one inch PCB, you might check out the competition to develop a robotic arm for NASA’s Astrobee robot.

  Some of the challenges are already closed, but there are quite a few still open for a few more months (despite the published closing date of and these look like great projects for a hacker. In particular, the software architecture and command, data, and power system are yet to start.

  But don’t let the $25,000 …read more

  Tags:  news  

• 1:37

  #0daytoday #Xen xen-netback xenvif_set_hash_mapping Integer Overflow Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Xen xen-netback xenvif_set_hash_mapping Integer Overflow Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 1:00

  Weaponized Fidget Spinners

   » ‎ Hack a Day

  Fidget spinners were the hottest new craze at one point, but their 15 minutes of fame has well and truly passed. They’re great for fidgeting, and not a whole lot else. One of the main objectives around their use is to spin them as quickly as possible. After [Sushi Ramen] hurt himself after spinning one up with compressed air, however – a new and dangerous idea came to mind.

  What you’re looking at is a fidget spinner sword, powered by compressed air. That alone is somewhat of a blessing, as it prevents this horrifying device from being easily man-portable. …read more

  Tags:  weapons hacks  

• August 18, 2018
• 22:00

  Custom Split-Flap Display Is a Unique Way to Show the Weather

   » ‎ Hack a Day

  There’s little doubt about the charms of a split-flap display. Watching a display build up a clear, legible message by flipping cards can be mesmerizing, whether on a retro clock radio from the 70s or as part of a big arrival and departure display at an airport or train station. But a weather station with a split-flap display? That’s something you don’t see often.

  We usually see projects using split-flap units harvested from some kind of commercial display, but [gabbapeople] decided to go custom and build these displays from the ground up. The frame and mechanicals for each display are …read more

  Tags:  misc hacks  

• 19:00

  PC in an SNES Case is a Weirdly Perfect Fit

   » ‎ Hack a Day

  For better or for worse, a considerable number of the projects we’ve seen here at Hackaday can be accurately summarized as: “Raspberry Pi put into something.” Which is hardly a surprise, the Pi is so tiny that it perfectly lends itself to getting grafted into unsuspecting pieces of consumer tech. But we see far fewer projects that manage to do the same trick with proper x86 PC hardware, but that’s not much of a surprise either given how much larger a motherboard and its components are.

  So this PC built into a Super Nintendo case by [NoshBar] is something …read more

  Tags:  classic hacks  

• 16:00

  How The 8087 Coprocessor Got Its Bias

   » ‎ Hack a Day

  Most of us have been there. You build a device but realize you need two or more voltages. You could hook up multiple power supplies but that can be inconvenient and just not elegant. Alternatively, you can do something in the device itself to create the extra voltages starting with just one. When [Ken Shirriff] decapped an 8087 coprocessor to begin exploring it, he found it had that very problem. It needed: +5 V, a ground, and an additional -5 V.

  His exploration starts with a smoking gun. After decapping the chip and counting out all the bond wires going …read more

  Tags:  classic hacks  

• 13:00

  When Every Last Nanoamp Matters

   » ‎ Hack a Day

  You can get electricity from just about anything. That old crystal radio kit you built as a kid taught you that, but how about doing something a little more interesting than listening to the local AM station with an earpiece connected to a radiator? That’s what the Electron Bucket is aiming to do. It’s a power harvesting device that grabs electricity from just about anywhere, whether it’s a piece of aluminum foil or a bunch of LEDs.

  The basic idea behind the Electron Bucket is to harvest ambient radio waves just like your old crystal radio kit. There’s a voltage …read more

  Tags:  green hacks  

• 10:01

  An Achievable Underwater Camera

   » ‎ Hack a Day

  We are surrounded by sensors for all forms of environmental measurement, and a casual browse through an electronics catalogue can see an experimenter tooled up with the whole array for a relatively small outlay. When the environment in question is not the still air of your bench but the turbulence, sand, grit, and mud of a sea floor, that pile of sensors becomes rather useless. [Ellie T] has been addressing this problem as part of the study of hypoxia in marine life, and part of her solution is to create an underwater camera by encasing a Raspberry Pi Zero W …read more

  Tags:  digital cameras hacks  

• 7:01

  Bench Power Supply Packs a Lot into a DIN-Rail Package

   » ‎ Hack a Day

  We’re not sure why we’ve got a thing for DIN-rail mounted projects, but we do. Perhaps it’s because we’ve seen so many cool industrial control cabinets, or maybe the forced neatness of DIN-mounted components resonates on some deep level. Whatever it is, if it’s DIN-rail mounted, chances are good that we’ll like it.

  Take this DIN-mounted bench power supply, for instance. On the face of it, [TD-er]’s project is yet another bench supply built around those ubiquitous DPS switching power supply modules, the ones with the colorful displays. Simply throwing one of those in a DIN-mount enclosure isn’t much to …read more

  Tags:  misc hacks  

• 4:01

  JB Weld – Strong Enough To Repair a Connecting Rod?

   » ‎ Hack a Day

  JB Weld is a particularly popular brand of epoxy, and features in many legends. “My cousin’s neighbour’s dog trainer’s grandpa once repaired a Sherman tank barrel in France with that stuff!” they’ll say. Thankfully, with the advent of new media, there’s a wealth of content out there of people putting these wild and interesting claims to the test. As the venerable Grace Hopper once said, “One accurate measurement is worth a thousand expert opinions“, so it’s great to see these experiments happening.

  [Project Farm] is one of them, this time attempting to repair a connecting rod …read more

  Tags:  classic hacks  

• 1:01

  A Motion Coprocessor Without The Proprietary Layer

   » ‎ Hack a Day

  When you have a complex task that would sap the time and energy of your microprocessor, it makes sense to offload it to another piece of hardware. We are all used to this in the form of the graphics chipsets our computers use — specialised processors whose computing power in that specific task easily outshines that of our main CPU. This offloading of tasks is just as relevant at the microcontroller level too. One example is the EM Microelectronics EM7180 motion co-processor. It takes input from a 3-axis gyroscope/accelerometer and magnetometer, acting for all intents and purposes as a fit-and-forget …read more

  Tags:  parts  

• 0:00

  Vuln: Multiple Intel Processors Side Channel Attack Multiple Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Multiple Intel Processors Side Channel Attack Multiple Information Disclosure Vulnerabilities

  Tags:   

• August 17, 2018
• 22:00

  Multi-switch Useless Box Is Useless In Multiple Ways

   » ‎ Hack a Day

  Enclosure: [download]

  We’ve probably all seen (and built) a useless box, in which you flip a switch that activates a servo that pops out a finger and flips the switch off. [Coffeman500] decided to take this a step further by building a useless box with multiple switches. Flip one, the finger pops out to flip it back. Flip several switches, and the finger pops out and flips each back in turn.

  It’s a smart build that [coffeeman500] says is his first electronics build. The compulsively switching brain of this is an ATmega328 driving an A4988 stepper motor driver, with one stepper moving …read more

  Tags:  Hardware  

• 19:00

  Radio Antenna Mismatching: VSWR Explained

   » ‎ Hack a Day

  If you have ever operated any sort of transmitting equipment, you’ve probably heard about matching an antenna to the transmitter and using the right co-ax cable. Having everything match — for example, at 50 or 75 ohms — allows the most power to get to the antenna and out into the airwaves. Even for receiving this is important, but you generally don’t hear about it as much for receivers. But here’s a question: if a 100-watt transmitter feeds a mismatched antenna and only delivers 50 watts, where did the other 50 watts go? [ElectronicsNotes] has a multi-part blog entry that …read more

  Tags:  radio hacks  

• 16:00

  A Tiny Steering Wheel You Can Print

   » ‎ Hack a Day

  Racing games are a great way to test drive that Ferrari you can’t quite afford yet, and the quality of simulations has greatly improved in the last 30 or so years. While there are all manner of high-quality steering wheels to connect to your PC or home console, many gamers still choose to play using a typical controller, using the thumbstick for steering. What if there was something in between?

  What we have here is a tiny steering wheel you can print for an Xbox One controller, that mounts to the controller frame and turns rotational motion into vaguely linear …read more

  Tags:  printer hacks  

• 13:00

  The Wonderful World of USB Type-C

   » ‎ Hack a Day

  Despite becoming common over the last few years USB-C remains a bit of a mystery. Try asking someone with a new blade-thin laptop what ports it has and the response will often include an awkward pause followed by “USB-C?”. That is unless you hear “USB 3” or maybe USB 3.1. Perhaps even “a charging port”. So what is that new oval hole in the side of your laptop called? And what can it really do? [jason] at Reclaimer Labs put together a must-read series of blog posts in 2016 and 2017 plumbing the depths of the USB 3.1 rabbit hole …read more

  Tags:  computer hacks  

• 12:40

  OpenSSL Toolkit 1.1.0i

   » ‎ Packet Storm Security Recent Files
  OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

  Tags:   

• 12:40

  OpenSSL Toolkit 1.1.0i

   » ‎ Packet Storm Security Tools
  OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

  Tags:   

• 12:40

  OpenSSL Toolkit 1.1.0i

   » ‎ Packet Storm Security Misc. Files
  OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

  Tags:   

• 12:36

  Xen xen-netback xenvif_set_hash_mapping Integer Overflow

   » ‎ Packet Storm Security Advisories
  Xen suffers from an integer overflow vulnerability in xen-netback xenvif_set_hash_mapping.

  Tags:   

• 12:36

  Xen xen-netback xenvif_set_hash_mapping Integer Overflow

   » ‎ Packet Storm Security Recent Files
  Xen suffers from an integer overflow vulnerability in xen-netback xenvif_set_hash_mapping.

  Tags:   

• 12:36

  Xen xen-netback xenvif_set_hash_mapping Integer Overflow

   » ‎ Packet Storm Security Misc. Files
  Xen suffers from an integer overflow vulnerability in xen-netback xenvif_set_hash_mapping.

  Tags:   

• 12:35

  Microsoft Edge Chakra InitializeNumberFormat / InitializeDateTimeFormat Type Confusion

   » ‎ Packet Storm Security Exploits
  The InitializeNumberFormat function in Intl.js is used to initialize an Intl.NumberFormat object, and InitializeDateTimeFormat is used for an Intl.DateTimeFormat object. There are two versions of each initializer. One is for WinGlob and the other is for ICU. The problem is that the versions for ICU don't check whether the given object has been initialized. This allows to initialize the same object multiple times which can lead to type confusion.

  Tags:   

• 12:35

  Microsoft Edge Chakra InitializeNumberFormat / InitializeDateTimeFormat Type Confusion

   » ‎ Packet Storm Security Recent Files
  The InitializeNumberFormat function in Intl.js is used to initialize an Intl.NumberFormat object, and InitializeDateTimeFormat is used for an Intl.DateTimeFormat object. There are two versions of each initializer. One is for WinGlob and the other is for ICU. The problem is that the versions for ICU don't check whether the given object has been initialized. This allows to initialize the same object multiple times which can lead to type confusion.

  Tags:   

• 12:35

  Microsoft Edge Chakra InitializeNumberFormat / InitializeDateTimeFormat Type Confusion

   » ‎ Packet Storm Security Misc. Files
  The InitializeNumberFormat function in Intl.js is used to initialize an Intl.NumberFormat object, and InitializeDateTimeFormat is used for an Intl.DateTimeFormat object. There are two versions of each initializer. One is for WinGlob and the other is for ICU. The problem is that the versions for ICU don't check whether the given object has been initialized. This allows to initialize the same object multiple times which can lead to type confusion.

  Tags:   

• 12:34

  Microsoft Edge Chakra JIT InlineArrayPush Type Confusion

   » ‎ Packet Storm Security Exploits
  Microsoft Edge Chakra JIT suffers from a type confusion vulnerability with InlineArrayPush.

  Tags:   

• 12:34

  Microsoft Edge Chakra JIT InlineArrayPush Type Confusion

   » ‎ Packet Storm Security Recent Files
  Microsoft Edge Chakra JIT suffers from a type confusion vulnerability with InlineArrayPush.

  Tags:   

• 12:34

  Microsoft Edge Chakra JIT InlineArrayPush Type Confusion

   » ‎ Packet Storm Security Misc. Files
  Microsoft Edge Chakra JIT suffers from a type confusion vulnerability with InlineArrayPush.

  Tags:   

• 12:33

  Microsoft Edge Chakra DictionaryPropertyDescriptor::CopyFrom Failed Copy

   » ‎ Packet Storm Security Exploits
  Microsoft Edge Chakra has an issue where DictionaryPropertyDescriptor::CopyFrom does not copy all fields.

  Tags:   

• 12:33

  Microsoft Edge Chakra DictionaryPropertyDescriptor::CopyFrom Failed Copy

   » ‎ Packet Storm Security Recent Files
  Microsoft Edge Chakra has an issue where DictionaryPropertyDescriptor::CopyFrom does not copy all fields.

  Tags:   

• 12:33

  Microsoft Edge Chakra DictionaryPropertyDescriptor::CopyFrom Failed Copy

   » ‎ Packet Storm Security Misc. Files
  Microsoft Edge Chakra has an issue where DictionaryPropertyDescriptor::CopyFrom does not copy all fields.

  Tags:   

• 12:32

  Microsoft Edge Chakra Parameter Scope Parsing Bug

   » ‎ Packet Storm Security Exploits
  Microsoft Edge Chakra suffers from a parameter scope parsing bug.

  Tags:   

• 12:32

  Microsoft Edge Chakra Parameter Scope Parsing Bug

   » ‎ Packet Storm Security Recent Files
  Microsoft Edge Chakra suffers from a parameter scope parsing bug.

  Tags:   

• 12:32

  Microsoft Edge Chakra Parameter Scope Parsing Bug

   » ‎ Packet Storm Security Misc. Files
  Microsoft Edge Chakra suffers from a parameter scope parsing bug.

  Tags:   

• 12:30

  Microsoft Edge Chakra JIT ImplicitCallFlags Check Bypass

   » ‎ Packet Storm Security Exploits
  Microsoft Edge Chakra JIT suffers from an ImplicitCallFlags check bypass vulnerability with Intl.

  Tags:   

• 12:30

  Microsoft Edge Chakra JIT ImplicitCallFlags Check Bypass

   » ‎ Packet Storm Security Recent Files
  Microsoft Edge Chakra JIT suffers from an ImplicitCallFlags check bypass vulnerability with Intl.

  Tags:   

• 12:30

  Microsoft Edge Chakra JIT ImplicitCallFlags Check Bypass

   » ‎ Packet Storm Security Misc. Files
  Microsoft Edge Chakra JIT suffers from an ImplicitCallFlags check bypass vulnerability with Intl.

  Tags:   

• 11:30

  Turning Cheap WiFi Modules Into Cheap WiFi Swiss Army Knives

   » ‎ Hack a Day

  When the ESP8266 was released, it was sold as a simple device that would connect to a WiFi network over a UART. It was effectively a WiFi modem for any microcontroller, available for just a few bucks. That in itself is awesome, but then the hackers got their hands on it. It turns out, the ESP8266 is actually a very capable microcontroller as well, and the newest modules have tons of Flash and pins for all your embedded projects.

  For [Amine]’s entry to the Hackaday Prize, he’s using the ESP8266 as the ultimate WiFi Swiss Army knife. The Kortex Xttend …read more

  Tags:  the hackaday prize  

• 10:54

  Silver Peak EdgeConnect 8.1.4.9_65644 XSS / DoS / Disclosure / Traversal

   » ‎ Packet Storm Security Exploits
  Silver Peak EdgeConnect version 8.1.4.9_65644 suffers from brute force, information leakage, cross site request forgery, cross site scripting, denial of service, default SNMP community string, and path traversal vulnerabilities.

  Tags:   

• 10:54

  Silver Peak EdgeConnect 8.1.4.9_65644 XSS / DoS / Disclosure / Traversal

   » ‎ Packet Storm Security Recent Files
  Silver Peak EdgeConnect version 8.1.4.9_65644 suffers from brute force, information leakage, cross site request forgery, cross site scripting, denial of service, default SNMP community string, and path traversal vulnerabilities.

  Tags:   

• 10:54

  Silver Peak EdgeConnect 8.1.4.9_65644 XSS / DoS / Disclosure / Traversal

   » ‎ Packet Storm Security Misc. Files
  Silver Peak EdgeConnect version 8.1.4.9_65644 suffers from brute force, information leakage, cross site request forgery, cross site scripting, denial of service, default SNMP community string, and path traversal vulnerabilities.

  Tags:   

• 10:42

  Debian Security Advisory 4276-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4276-1 - Fariskhi Vidyan and Thomas Jarosch discovered several vulnerabilities in php-horde-image, the image processing library for the Horde groupware suite. They would allow an attacker to cause a denial-of-service or execute arbitrary code.

  Tags:   

• 10:42

  Debian Security Advisory 4276-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 4276-1 - Fariskhi Vidyan and Thomas Jarosch discovered several vulnerabilities in php-horde-image, the image processing library for the Horde groupware suite. They would allow an attacker to cause a denial-of-service or execute arbitrary code.

  Tags:   

• 10:42

  Debian Security Advisory 4276-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 4276-1 - Fariskhi Vidyan and Thomas Jarosch discovered several vulnerabilities in php-horde-image, the image processing library for the Horde groupware suite. They would allow an attacker to cause a denial-of-service or execute arbitrary code.

  Tags:   

• 10:42

  Debian Security Advisory 4275-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4275-1 - Kristi Nikolla discovered an information leak in Keystone, the OpenStack identity service, if running in a federated setup.

  Tags:   

• 10:42

  Debian Security Advisory 4275-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 4275-1 - Kristi Nikolla discovered an information leak in Keystone, the OpenStack identity service, if running in a federated setup.

  Tags:   

• 10:42

  Debian Security Advisory 4275-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 4275-1 - Kristi Nikolla discovered an information leak in Keystone, the OpenStack identity service, if running in a federated setup.

  Tags:   

• 10:42

  Debian Security Advisory 4274-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4274-1 - This update provides mitigations for the "L1 Terminal Fault" vulnerability affecting a range of Intel CPUs.

  Tags:   

• 10:42

  Debian Security Advisory 4274-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 4274-1 - This update provides mitigations for the "L1 Terminal Fault" vulnerability affecting a range of Intel CPUs.

  Tags:   

• 10:42

  Debian Security Advisory 4274-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 4274-1 - This update provides mitigations for the "L1 Terminal Fault" vulnerability affecting a range of Intel CPUs.

  Tags:   

• 10:42

  Debian Security Advisory 4273-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4273-1 - This update ships updated CPU microcode for some types of Intel CPUs and provides SSBD support (needed to address "Spectre v4") and fixes for "Spectre v3a".

  Tags:   

• 10:42

  Debian Security Advisory 4273-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 4273-1 - This update ships updated CPU microcode for some types of Intel CPUs and provides SSBD support (needed to address "Spectre v4") and fixes for "Spectre v3a".

  Tags:   

• 10:42

  Debian Security Advisory 4273-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 4273-1 - This update ships updated CPU microcode for some types of Intel CPUs and provides SSBD support (needed to address "Spectre v4") and fixes for "Spectre v3a".

  Tags:   

• 10:42

  Ubuntu Security Notice USN-3658-3

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3658-3 - USN-3658-1 fixed a vulnerability in procps-ng. This update provides the corresponding update for Ubuntu 12.04 ESM. It was discovered that the procps-ng top utility incorrectly read its configuration file from the current working directory. A local attacker could possibly use this issue to escalate privileges. Various other issues were also addressed.

  Tags:   

• 10:42

  Ubuntu Security Notice USN-3658-3

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 3658-3 - USN-3658-1 fixed a vulnerability in procps-ng. This update provides the corresponding update for Ubuntu 12.04 ESM. It was discovered that the procps-ng top utility incorrectly read its configuration file from the current working directory. A local attacker could possibly use this issue to escalate privileges. Various other issues were also addressed.

  Tags:   

• 10:42

  Ubuntu Security Notice USN-3658-3

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 3658-3 - USN-3658-1 fixed a vulnerability in procps-ng. This update provides the corresponding update for Ubuntu 12.04 ESM. It was discovered that the procps-ng top utility incorrectly read its configuration file from the current working directory. A local attacker could possibly use this issue to escalate privileges. Various other issues were also addressed.

  Tags:   

• 10:41

  Red Hat Security Advisory 2018-2486-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2486-01 - This release adds the new Apache HTTP Server 2.4.29 packages that are part of the JBoss Core Services offering. This release serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.23, and includes bug fixes and enhancements. Issues addressed include buffer overflow, heap overflow, and use-after-free vulnerabilities.

  Tags:   

• 10:41

  Red Hat Security Advisory 2018-2486-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2486-01 - This release adds the new Apache HTTP Server 2.4.29 packages that are part of the JBoss Core Services offering. This release serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.23, and includes bug fixes and enhancements. Issues addressed include buffer overflow, heap overflow, and use-after-free vulnerabilities.

  Tags:   

• 10:41

  Red Hat Security Advisory 2018-2486-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2486-01 - This release adds the new Apache HTTP Server 2.4.29 packages that are part of the JBoss Core Services offering. This release serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.23, and includes bug fixes and enhancements. Issues addressed include buffer overflow, heap overflow, and use-after-free vulnerabilities.

  Tags:   

• 10:40

  Red Hat Security Advisory 2018-2482-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2482-01 - Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that runs virtually anywhere. Issues addressed include a container breakout vulnerability.

  Tags:   

• 10:40

  Red Hat Security Advisory 2018-2482-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2482-01 - Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that runs virtually anywhere. Issues addressed include a container breakout vulnerability.

  Tags:   

• 10:40

  Red Hat Security Advisory 2018-2482-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2482-01 - Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that runs virtually anywhere. Issues addressed include a container breakout vulnerability.

  Tags:   

• 10:39

  Red Hat Security Advisory 2018-2469-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2469-01 - Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. This release of Red Hat JBoss Web Server 3.1 Service Pack 4 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References. Issues addressed include insecure defaults.

  Tags:   

• 10:39

  Red Hat Security Advisory 2018-2469-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2469-01 - Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. This release of Red Hat JBoss Web Server 3.1 Service Pack 4 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References. Issues addressed include insecure defaults.

  Tags:   

• 10:39

  Red Hat Security Advisory 2018-2469-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2469-01 - Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. This release of Red Hat JBoss Web Server 3.1 Service Pack 4 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References. Issues addressed include insecure defaults.

  Tags:   

• 10:39

  Ubuntu Security Notice USN-3743-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3743-1 - A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

  Tags:   

• 10:39

  Ubuntu Security Notice USN-3743-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 3743-1 - A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

  Tags:   

• 10:39

  Ubuntu Security Notice USN-3743-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 3743-1 - A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

  Tags:   

• 10:39

  Ubuntu Security Notice USN-3744-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3744-1 - Andrew Krasichkov discovered that the PostgreSQL client library incorrectly reset its internal state between connections. A remote attacker could possibly use this issue to bypass certain client-side connection security features. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that PostgreSQL incorrectly checked authorization on certain statements. A remote attacker could possibly use this issue to read arbitrary server memory or alter certain data. Various other issues were also addressed.

  Tags:   

• 10:39

  Ubuntu Security Notice USN-3744-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 3744-1 - Andrew Krasichkov discovered that the PostgreSQL client library incorrectly reset its internal state between connections. A remote attacker could possibly use this issue to bypass certain client-side connection security features. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that PostgreSQL incorrectly checked authorization on certain statements. A remote attacker could possibly use this issue to read arbitrary server memory or alter certain data. Various other issues were also addressed.

  Tags:   

• 10:39

  Ubuntu Security Notice USN-3744-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 3744-1 - Andrew Krasichkov discovered that the PostgreSQL client library incorrectly reset its internal state between connections. A remote attacker could possibly use this issue to bypass certain client-side connection security features. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that PostgreSQL incorrectly checked authorization on certain statements. A remote attacker could possibly use this issue to read arbitrary server memory or alter certain data. Various other issues were also addressed.

  Tags:   

• 10:21

  ADM 3.1.2RHG1 Remote Code Execution

   » ‎ Packet Storm Security Exploits
  ADM versions 3.1.2RHG1 and below suffer from a remote code execution vulnerability.

  Tags:   

• 10:21

  ADM 3.1.2RHG1 Remote Code Execution

   » ‎ Packet Storm Security Recent Files
  ADM versions 3.1.2RHG1 and below suffer from a remote code execution vulnerability.

  Tags:   

• 10:21

  ADM 3.1.2RHG1 Remote Code Execution

   » ‎ Packet Storm Security Misc. Files
  ADM versions 3.1.2RHG1 and below suffer from a remote code execution vulnerability.

  Tags:   

• 10:20

  Mikrotik WinBox 6.42 Credential Disclosure

   » ‎ Packet Storm Security Exploits
  Mikrotik WinBox version 6.42 suffers from a credential disclosure vulnerability.

  Tags:   

• 10:20

  Mikrotik WinBox 6.42 Credential Disclosure

   » ‎ Packet Storm Security Recent Files
  Mikrotik WinBox version 6.42 suffers from a credential disclosure vulnerability.

  Tags:   

• 10:20

  Mikrotik WinBox 6.42 Credential Disclosure

   » ‎ Packet Storm Security Misc. Files
  Mikrotik WinBox version 6.42 suffers from a credential disclosure vulnerability.

  Tags:   

• 10:01

  Circuit VR: A Tale Of Two Transistors

   » ‎ Hack a Day

  Last time on Circuit VR, we looked at creating a very simple common emitter amplifier, but we didn’t talk about how to select the capacitor values, or much about why we wanted them. We are going to look at that this time, as well as how to use a second transistor in an emitter follower (or common collector) configuration to stiffen the amplifier’s ability to drive an output load.

  Several readers wrote to point out that I’d pushed the Ic value a little high for a 2N2222. As it turns out, at least one of the calculations in the comments …read more

  Tags:  Skills  

• 8:30

  Semi-automated Winder Spins Rotors for Motors

   » ‎ Hack a Day

  What’s your secret evil plan? Are you looking for world domination by building a machine that can truly replicate itself? Or are you just tired of winding motor rotors and other coils by hand? Either way, this automated coil winder is something you’re probably going to need.

  We jest in part, but it’s true that closing the loop on self-replicating machines means being able to make things like motors. And for either brushed or brushless motors, that means turning spools of wire into coils of some sort. [Mr Innovative]’s winder uses a 3D-printed tube to spin magnet wire around a …read more

  Tags:  misc hacks  

• 8:26

  #0daytoday #Microsoft Edge Chakra JIT - InitializeNumberFormat and InitializeDateTimeFormat Type Co [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Microsoft Edge Chakra JIT - InitializeNumberFormat and InitializeDateTimeFormat Type Co [#0day #Exploit]

  Tags:   

• 8:26

  #0daytoday #Microsoft Edge Chakra JIT - InlineArrayPush Type Confusion Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Microsoft Edge Chakra JIT - InlineArrayPush Type Confusion Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 8:26

  #0daytoday #Microsoft Edge Chakra JIT - DictionaryPropertyDescriptor::CopyFrom Type Confusion Explo [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Microsoft Edge Chakra JIT - DictionaryPropertyDescriptor::CopyFrom Type Confusion Explo [#0day #Exploit]

  Tags:   

• 8:26

  #0daytoday #Microsoft Edge Chakra JIT - Scope Parsing Type Confusion Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Microsoft Edge Chakra JIT - Scope Parsing Type Confusion Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 7:43

  Appliance Botnet Could Bring Power Grid To Its Knees

   » ‎ Packet Storm Security Headlines
  Appliance Botnet Could Bring Power Grid To Its Knees

  Tags:  headlineflawscada  

• 7:43

  Chinese Hackers Target Alaska

   » ‎ Packet Storm Security Headlines
  Chinese Hackers Target Alaska

  Tags:  headlinehackergovernmentusachinacyberwar  

• 7:43

  Necurs Botnet Launches Fresh Assault Against Banks

   » ‎ Packet Storm Security Headlines
  Necurs Botnet Launches Fresh Assault Against Banks

  Tags:  headlinemalwarebankcybercrimebotnetfraud  

• 7:43

  Apple Hack Teen Pleads Guilty

   » ‎ Packet Storm Security Headlines
  Apple Hack Teen Pleads Guilty

  Tags:  headlinehackerdata lossapple  

• 7:27

  #0daytoday #Microsoft Edge Chakra JIT - ImplicitCallFlags Check Bypass with Intl Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Microsoft Edge Chakra JIT - ImplicitCallFlags Check Bypass with Intl Exploit [#0day #Exploit]

  Tags:   

• 7:01

  Getting An RF Low-Pass Filter Right

   » ‎ Hack a Day

  If you are in any way connected with radio, you will have encountered the low pass filter as a means to remove unwanted harmonics from the output of your transmitters. It’s a network of capacitors and inductors usually referred to as a pi-network after the rough resemblance of the schematic to a capital Greek letter Pi, and getting them right has traditionally been something of a Black Art. There are tables and formulae, but even after impressive feats of calculation the result can often not match the expectation.

  Happily as with so many other fields, in recent decades the advent …read more

  Tags:  radio hacks  

• 6:00

  #0daytoday #ADM 3.1.2RHG1 - Remote Code Execution Exploit CVE-2018-11510 [webapps #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #ADM 3.1.2RHG1 - Remote Code Execution Exploit CVE-2018-11510 [webapps #exploits #0day #Exploit]

  Tags:   

• 5:29

  #0daytoday #OpenSSH 2.3 / 7.4 - Username Enumeration Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #OpenSSH 2.3 / 7.4 - Username Enumeration Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 5:29

  #0daytoday #OpenSSH 2.3 < 7.4 - Username Enumeration Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #OpenSSH 2.3 < 7.4 - Username Enumeration Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 5:28

  #0daytoday #CEWE Photoshow 6.3.4 - Denial of Service Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #CEWE Photoshow 6.3.4 - Denial of Service Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 4:00

  What’s Behind the Door? An IoT Light Switch

   » ‎ Hack a Day

  We’re not sure who designed [Max Glenister]’s place, but they had some strange ideas about interior door positioning. The door to his office is right next to a corner, yet it opens into the room instead of toward the wall. Well, that issue’s been taken care of. But the architect and the electrician got the last laugh, because now the light switch is blocked by the open door.

  Folks, this is the stuff that IoT is made for. [Max] here solved one problem, and another sprang up in its place. What better reason for your maiden voyage into the cloud …read more

  Tags:  home hacks  

• 2:42

  Silver Peak EdgeConnect < 8.1.7.x. multiple vulnerabilities

   » ‎ Full Disclosure

  Posted by SCADA StrangeLove on Aug 17

  Silver Peak EdgeConnect < 8.1.7.x. multiple vulnerabilities
  
  Traceback:
  http://www.scada.sl/2018/08/silver-peak-edgeconnect-817x-multiple.html
  
  Silver Peak SD-WAN solutions enable distributed enterprises to build a
  better WAN, securely connecting users to applications without compromising
  application performance.
  https://www.silver-peak.com/sd-wan
  
  Version: 8.1.4.9_65644
  Kernel: Linux silverpeak-094976 2.6.38.6-rc1 #1 VXOA 8.1.4.9_65644 SMP...
  

  Tags:   

• 1:31

  [SECURITY] [DSA 4276-1] php-horde-image security update

   » ‎ Bugtraq

  Posted by Sebastien Delafond on Aug 17

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4276-1 security () debian org
  https://www.debian.org/security/ Sebastien Delafond
  August 17, 2018 https://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : php-horde-image
  CVE ID : CVE-2017-9773...
  

  Tags:   

• 1:00

  No SD Card Slot? No Problem!

   » ‎ Hack a Day

  We feature hacks on this site of all levels of complexity. The simplest ones are usually the most elegant of “Why didn’t I think of that!” builds, but just occasionally we find something that is as much a bodge as a hack, a piece of work the sheer audacity of which elicits a reaction that has more of the “How did they get away with that! ” about it.

  Such a moment comes today from [Robinlol], who has made an SD card socket. Why would you make an SD card socket when you could buy one is unclear, beyond that …read more

  Tags:  parts  

• 0:00

  Vuln: Cisco Web Security Appliance CVE-2018-0428 Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Cisco Web Security Appliance CVE-2018-0428 Local Privilege Escalation Vulnerability

  Tags:   

• 0:00

  Vuln: Multiple Intel Processors Side Channel Attack Multiple Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Multiple Intel Processors Side Channel Attack Multiple Information Disclosure Vulnerabilities

  Tags:   

• August 16, 2018
• 22:22

  CEWE Photoshow 6.3.4 Denial Of Service

   » ‎ Packet Storm Security Exploits
  CEWE Photoshow version 6.3.4 suffers from a denial of service vulnerability.

  Tags:   

• 22:22

  CEWE Photoshow 6.3.4 Denial Of Service

   » ‎ Packet Storm Security Recent Files
  CEWE Photoshow version 6.3.4 suffers from a denial of service vulnerability.

  Tags:   

• 22:22

  CEWE Photoshow 6.3.4 Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  CEWE Photoshow version 6.3.4 suffers from a denial of service vulnerability.

  Tags:   

• 22:00

  PCB Junk Drawer Turned Into Blinky Mosaic

   » ‎ Hack a Day

  We’ve all got a box full of old PCBs, just waiting to be stripped of anything useful. [Dennis1a4] decided to do something with his, turning it into an attractive mosaic that he hung on the wall of his new workshop. But this isn’t just a pile of old PCBs: [Dennis1a4] decided to use the LEDs that were on many of the old boards, creating a blinky junk build. That’s kind of neat in itself, but he then decided to go further, building in an IR receiver so he could control the blinkiness, and a PIR sensor that detected when someone …read more

  Tags:  arduino hacks  

• 20:33

  WordPress Dreamsmiths Themes 0.0.1 Arbitrary File Download

   » ‎ Packet Storm Security Exploits
  WordPress Dreamsmiths Themes version 0.0.1 suffers from an arbitrary file download vulnerability.

  Tags:   

• 20:33

  WordPress Dreamsmiths Themes 0.0.1 Arbitrary File Download

   » ‎ Packet Storm Security Recent Files
  WordPress Dreamsmiths Themes version 0.0.1 suffers from an arbitrary file download vulnerability.

  Tags:   

• 20:33

  WordPress Dreamsmiths Themes 0.0.1 Arbitrary File Download

   » ‎ Packet Storm Security Misc. Files
  WordPress Dreamsmiths Themes version 0.0.1 suffers from an arbitrary file download vulnerability.

  Tags:   

• 19:30

  [SECURITY] [DSA 4275-1] keystone security update

   » ‎ Bugtraq

  Posted by Moritz Muehlenhoff on Aug 16

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4275-1 security () debian org
  https://www.debian.org/security/ Moritz Muehlenhoff
  August 16, 2018 https://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : keystone
  CVE ID : CVE-2018-14432
  Debian Bug :...
  

  Tags:   

• 19:27

  [SECURITY] [DSA 4274-1] xen security update

   » ‎ Bugtraq

  Posted by Moritz Muehlenhoff on Aug 16

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4274-1 security () debian org
  https://www.debian.org/security/ Moritz Muehlenhoff
  August 16, 2018 https://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : xen
  CVE ID : CVE-2018-3620 CVE-2018-3646
  
  This...
  

  Tags:   

• 19:24

  [SECURITY] [DSA 4273-1] intel-microcode security update

   » ‎ Bugtraq

  Posted by Moritz Muehlenhoff on Aug 16

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4273-1 security () debian org
  https://www.debian.org/security/ Moritz Muehlenhoff
  August 16, 2018 https://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : intel-microcode
  CVE ID : CVE-2018-3639...
  

  Tags:   

• 19:21

  SEC Consult SA-20180813-0 :: SQL Injection, XSS & CSRF vulnerabilities in Pimcore

   » ‎ Bugtraq

  Posted by SEC Consult Vulnerability Lab on Aug 16

  SEC Consult Vulnerability Lab Security Advisory < 20180813-0 >
  =======================================================================
  title: SQL Injection, XSS & CSRF vulnerabilities
  product: Pimcore
  vulnerable version: 5.2.3 and below
  fixed version: 5.3.0
  CVE number: CVE-2018-14057, CVE-2018-14058, CVE-2018-14059
  impact: High
  homepage: https://pimcore.com/en...
  

  Tags:   

• 19:00

  Digital Dining With Charged Chopsticks

   » ‎ Hack a Day

  You step out of the audience onto a stage, and a hypnotist hands you a potato chip. The chip is salty and crunchy and you are convinced the chip is genuine. Now, replace the ordinary potato chip with a low-sodium version and replace the hypnotist with an Arduino. [Nimesha Ranasinghe] at the University of Maine’s Multisensory Interactive Media Lab wants to trick people into eating food with less salt by telling our tongues that we taste more salt than the recipe calls for with the help of electrical pulses controlled by everyone’s (least) favorite microcontroller.

  Eating Cheetos with chopsticks is …read more

  Tags:  cooking hacks  

• 17:00

  [webapps] Mikrotik WinBox 6.42 - Credential Disclosure (golang)

   » ‎ Exploit-DB
  Mikrotik WinBox 6.42 - Credential Disclosure (golang)

  Tags:   

• 17:00

  [dos] CEWE Photoshow 6.3.4 - Denial of Service (PoC)

   » ‎ Exploit-DB
  CEWE Photoshow 6.3.4 - Denial of Service (PoC)

  Tags:   

• 17:00

  [webapps] ADM 3.1.2RHG1 - Remote Code Execution

   » ‎ Exploit-DB
  ADM 3.1.2RHG1 - Remote Code Execution

  Tags:   

• 17:00

  [dos] Microsoft Edge Chakra JIT - ImplicitCallFlags Check Bypass with Intl

   » ‎ Exploit-DB
  Microsoft Edge Chakra JIT - ImplicitCallFlags Check Bypass with Intl

  Tags:   

• 17:00

  [dos] Microsoft Edge Chakra JIT - InitializeNumberFormat and InitializeDateTimeFormat Type Confusion

   » ‎ Exploit-DB
  Microsoft Edge Chakra JIT - InitializeNumberFormat and InitializeDateTimeFormat Type Confusion

  Tags:   

• 17:00

  [dos] Microsoft Edge Chakra JIT - 'InlineArrayPush' Type Confusion

   » ‎ Exploit-DB
  Microsoft Edge Chakra JIT - 'InlineArrayPush' Type Confusion

  Tags:   

• 17:00

  [dos] Microsoft Edge Chakra JIT - 'DictionaryPropertyDescriptor::CopyFrom' Type Confusion

   » ‎ Exploit-DB
  Microsoft Edge Chakra JIT - 'DictionaryPropertyDescriptor::CopyFrom' Type Confusion

  Tags:   

• 17:00

  [dos] Microsoft Edge Chakra JIT - Scope Parsing Type Confusion

   » ‎ Exploit-DB
  Microsoft Edge Chakra JIT - Parameter Scope Parsing Type Confusion

  Tags:   

• 16:54

  Microsoft Security Advisory Updates For August 15, 2018

   » ‎ Packet Storm Security Advisories
  This Microsoft advisory notification includes advisories released or updated on August 15, 2018.

  Tags:   

• 16:54

  Microsoft Security Advisory Updates For August 15, 2018

   » ‎ Packet Storm Security Recent Files
  This Microsoft advisory notification includes advisories released or updated on August 15, 2018.

  Tags:   

• 16:54

  Microsoft Security Advisory Updates For August 15, 2018

   » ‎ Packet Storm Security Misc. Files
  This Microsoft advisory notification includes advisories released or updated on August 15, 2018.

  Tags:   

• 16:02

  Microsoft Security Bulletin CVE Revision Increment For August, 2018

   » ‎ Packet Storm Security Advisories
  This Microsoft bulletin summary holds CVE updates for CVE-2018-8202 and CVE-2018-8284.

  Tags:   

• 16:02

  Microsoft Security Bulletin CVE Revision Increment For August, 2018

   » ‎ Packet Storm Security Recent Files
  This Microsoft bulletin summary holds CVE updates for CVE-2018-8202 and CVE-2018-8284.

  Tags:   

• 16:02

  Microsoft Security Bulletin CVE Revision Increment For August, 2018

   » ‎ Packet Storm Security Misc. Files
  This Microsoft bulletin summary holds CVE updates for CVE-2018-8202 and CVE-2018-8284.

  Tags:   

• 16:00

  A Surprisingly Practical Numitron Watch

   » ‎ Hack a Day

  Regular Hackaday readers are surely familiar with Nixie tubes: the fantastically retro cold cathode display devices that hackers have worked into all manner of devices (especially timepieces) to give them an infusion of glowing faux nostalgia. But unfortunately, Nixie displays are fairly fragile and can be tricky to drive due to their high voltage requirements. For those who might want to work with something more forgiving, a possible alternative is the Numitron that uses incandescent filaments for each segment.

  There hasn’t been a lot of prior-art that utilizes Numitrons, but that might be changing, given how fantastic this wristwatch created …read more

  Tags:  classic hacks  

• 15:59

  #0daytoday #Linux PAM 0.6.9 Authentication Replay Vulnerability [remote #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Linux PAM 0.6.9 Authentication Replay Vulnerability [remote #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 15:58

  #0daytoday #Apple Smart Card Services Memory Corruption Vulnerability [remote #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Apple Smart Card Services Memory Corruption Vulnerability [remote #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 15:53

  #0daytoday #OpenSC 0.18.0 Buffer Overflow / Out Of Bounds Read Vulnerability [remote #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #OpenSC 0.18.0 Buffer Overflow / Out Of Bounds Read Vulnerability [remote #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 15:50

  #0daytoday #Yubico PIV Tool 1.5.0 Buffer Overflow Vulnerability [remote #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Yubico PIV Tool 1.5.0 Buffer Overflow Vulnerability [remote #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 15:22

  Red Hat Security Advisory 2018-2439-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2439-01 - MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Issues addressed include a silly amount of unspecified vulnerabilities.

  Tags:   

• 15:22

  Red Hat Security Advisory 2018-2439-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2439-01 - MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Issues addressed include a silly amount of unspecified vulnerabilities.

  Tags:   

• 15:22

  Red Hat Security Advisory 2018-2439-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2439-01 - MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Issues addressed include a silly amount of unspecified vulnerabilities.

  Tags:   

• 15:13

  #0daytoday #Yubico 0.1.9 libykneomgr Out Of Bounds Read / Write Vulnerability [remote #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Yubico 0.1.9 libykneomgr Out Of Bounds Read / Write Vulnerability [remote #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 15:10

  #0daytoday #Jetty 6.1.6 Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Jetty 6.1.6 Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 15:06

  #0daytoday #Easy RM To MP3 Converter 2.6 Stack Buffer Overflow Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Easy RM To MP3 Converter 2.6 Stack Buffer Overflow Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 14:41

  #0daytoday #Wordpress Export Users to CSV 1.1.1 Plugin - CSV Injection Vulnerability [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Wordpress Export Users to CSV 1.1.1 Plugin - CSV Injection Vulnerability [#0day #Exploit]

  Tags:   

• 14:37

  #0daytoday #Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery Vulne [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery Vulne [#0day #Exploit]

  Tags:   

• 14:35

  #0daytoday #WebkitGTK+ 2.20.3 - ImageBufferCairo::getImageData() Buffer Overflow Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #WebkitGTK+ 2.20.3 - ImageBufferCairo::getImageData() Buffer Overflow Exploit [#0day #Exploit]

  Tags:   

• 14:34

  #0daytoday #CentralManagement Software 1.4.13 - Denial of Service Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #CentralManagement Software 1.4.13 - Denial of Service Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 13:22

  Red Hat Security Advisory 2018-2462-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2462-01 - Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Issues addressed include a buffer overflow vulnerability.

  Tags:   

• 13:22

  Red Hat Security Advisory 2018-2462-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2462-01 - Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Issues addressed include a buffer overflow vulnerability.

  Tags:   

• 13:22

  Red Hat Security Advisory 2018-2462-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2462-01 - Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Issues addressed include a buffer overflow vulnerability.

  Tags:   

• 13:00

  Hanging, Sliding Raspi Camera Adds Dimension To Octoprint

   » ‎ Hack a Day

  Are you using Octoprint yet? It’s so much more than just a way to control your printer over the internet, or to keep tabs on it over webcam when you’re off at work or fetching a beer. The 3D printing community has rallied around Octoprint, creating all sorts of handy plug-ins like Octolapse, which lets you watch the print blossom from the bed via time-lapse video.

  Hackaday alum [Jeremy S Cook] wanted to devise a 3D-printable mount for a Raspi camera after finding himself inspired by [Tom Nardi]’s excellent coverage of Octoprint and Octolapse. He recently bought a wire shelving …read more

  Tags:  raspberry  

• 12:32

  Red Hat Security Advisory 2018-2470-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2470-01 - Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. This release of Red Hat JBoss Web Server 3.1 Service Pack 4 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes. Issues addressed include insecure defaults.

  Tags:   

• 12:32

  Red Hat Security Advisory 2018-2470-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2470-01 - Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. This release of Red Hat JBoss Web Server 3.1 Service Pack 4 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes. Issues addressed include insecure defaults.

  Tags:   

• 12:32

  Red Hat Security Advisory 2018-2470-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2470-01 - Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. This release of Red Hat JBoss Web Server 3.1 Service Pack 4 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes. Issues addressed include insecure defaults.

  Tags:   

• 11:32

  Central Management Software 1.4.13 Denial Of Service

   » ‎ Packet Storm Security Exploits
  Central Management Software version 1.4.13 suffers from a denial of service vulnerability.

  Tags:   

• 11:32

  Central Management Software 1.4.13 Denial Of Service

   » ‎ Packet Storm Security Recent Files
  Central Management Software version 1.4.13 suffers from a denial of service vulnerability.

  Tags:   

• 11:32

  Central Management Software 1.4.13 Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  Central Management Software version 1.4.13 suffers from a denial of service vulnerability.

  Tags:   

• 10:22

  ObserverIP Scan Tool 1.4.0.1 Denial Of Service

   » ‎ Packet Storm Security Exploits
  ObserverIP Scan Tool version 1.4.0.1 denial of service proof of concept exploit.

  Tags:   

• 10:22

  ObserverIP Scan Tool 1.4.0.1 Denial Of Service

   » ‎ Packet Storm Security Recent Files
  ObserverIP Scan Tool version 1.4.0.1 denial of service proof of concept exploit.

  Tags:   

• 10:22

  ObserverIP Scan Tool 1.4.0.1 Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  ObserverIP Scan Tool version 1.4.0.1 denial of service proof of concept exploit.

  Tags:   

• 10:01

  Getting Kitted to Teach your First Hardware Workshop

   » ‎ Hack a Day

  I was always a sucker for art classes in my early days. There was something special about getting personal instruction while having those raw materials in your hands at the same time. Maybe it was the patient voice of the teacher or the taste of the crayons that finally got to my head. Either way, I started thinking: “I want to do this; I want to teach this stuff.”

  Last year at Hackaday Superconference I got my chance. Hardware workshops with real hardware were so rare; I just had to bring one to the table! What follows is my tale …read more

  Tags:  cons  

• 9:01

  Breakfast at DEF CON — The Greatest Illicit Meetup of All

   » ‎ Hack a Day

  Every year we host Breakfast at DEF CON on the Sunday morning of the largest hacker conference in the United States. I think it’s a brilliant time to have a meetup — almost nobody is out partying on Sunday morning, and coffee and donuts is a perfect way to get your system running again after too much excess from Saturday evening.

  This year marks our fourth Breakfast and we thought this time it would be completely legit. Before we’ve just picked a random coffee shop and showed up unannounced. But this year we synced up with some of our friends …read more

  Tags:  cons  

• 8:01

  DARPA Goes Underground For Next Challenge

   » ‎ Hack a Day

  We all love reading about creative problem-solving work done by competitors in past DARPA robotic challenges. Some of us even have ambition to join the fray and compete first-hand instead of just reading about them after the fact. If this describes you, step on up to the DARPA Subterranean Challenge.

  Following up on past challenges to build autonomous vehicles and humanoid robots, DARPA now wants to focus collective brainpower solving problems encountered by robots working underground. There will be two competition tracks: the Systems Track is what we’ve come to expect, where teams build both the hardware and software of …read more

  Tags:  contests  

• 7:24

  Pimcore 5.2.3 CSRF / Cross Site Scripting / SQL Injection

   » ‎ Packet Storm Security Exploits
  Pimcore versions 5.2.3 and below suffer from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.

  Tags:   

• 7:24

  Pimcore 5.2.3 CSRF / Cross Site Scripting / SQL Injection

   » ‎ Packet Storm Security Recent Files
  Pimcore versions 5.2.3 and below suffer from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.

  Tags:   

• 7:24

  Pimcore 5.2.3 CSRF / Cross Site Scripting / SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Pimcore versions 5.2.3 and below suffer from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.

  Tags:   

• 7:16

  Red Hat Security Advisory 2018-2402-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2402-01 - The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal. Issues addressed include a denial of service vulnerability.

  Tags:   

• 7:16

  Red Hat Security Advisory 2018-2402-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2402-01 - The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal. Issues addressed include a denial of service vulnerability.

  Tags:   

• 7:16

  Red Hat Security Advisory 2018-2402-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2402-01 - The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal. Issues addressed include a denial of service vulnerability.

  Tags:   

• 7:16

  Red Hat Security Advisory 2018-2435-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2435-01 - The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version 30.0.0.154. Issues addressed include bypass and information leakage vulnerabilities.

  Tags:   

• 7:16

  Red Hat Security Advisory 2018-2435-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2435-01 - The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version 30.0.0.154. Issues addressed include bypass and information leakage vulnerabilities.

  Tags:   

• 7:16

  Red Hat Security Advisory 2018-2435-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2435-01 - The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version 30.0.0.154. Issues addressed include bypass and information leakage vulnerabilities.

  Tags:   

• 7:15

  Ubuntu Security Notice USN-3733-2

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3733-2 - USN-3733-1 fixed a vulnerability in GnuPG. This update provides the corresponding update for Ubuntu 12.04 ESM. Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that GnuPG is vulnerable to a cache side- channel attack. A local attacker could use this attack to recover RSA private keys. Various other issues were also addressed.

  Tags:   

• 7:15

  Ubuntu Security Notice USN-3733-2

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 3733-2 - USN-3733-1 fixed a vulnerability in GnuPG. This update provides the corresponding update for Ubuntu 12.04 ESM. Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that GnuPG is vulnerable to a cache side- channel attack. A local attacker could use this attack to recover RSA private keys. Various other issues were also addressed.

  Tags:   

• 7:15

  Ubuntu Security Notice USN-3733-2

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 3733-2 - USN-3733-1 fixed a vulnerability in GnuPG. This update provides the corresponding update for Ubuntu 12.04 ESM. Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that GnuPG is vulnerable to a cache side- channel attack. A local attacker could use this attack to recover RSA private keys. Various other issues were also addressed.

  Tags:   

• 7:01

  Jump Start Your Car With A Drill Battery

   » ‎ Hack a Day

  Sometimes, you move to a new city, and things just aren’t going your way. You’re out of cash, out of energy, and thanks to your own foolishness, your car’s battery is dead. You need to jump-start the car, but you’re feeling remarkably antisocial, and you don’t know anyone else in town you can call. What do you do?

  It’s not a problem, because you’re a hacker and you have a cordless drill in the back seat of your car. The average drill of today tends to run on a nice 18 volt lithium battery pack. These packs are capable of …read more

  Tags:  car hacks  

• 6:25

  Google Expands Bug Bounty To Include Fraud Protection Bypass

   » ‎ Packet Storm Security Headlines
  Google Expands Bug Bounty To Include Fraud Protection Bypass

  Tags:  headlinefraudflawgoogle  

• 6:25

  Credit Card Skimmers Now Need To Fear The Reaper

   » ‎ Packet Storm Security Headlines
  Credit Card Skimmers Now Need To Fear The Reaper

  Tags:  headlinehackerbankcybercrimefraudconference  

• 6:25

  The Hackers Hunting Down Missing People

   » ‎ Packet Storm Security Headlines
  The Hackers Hunting Down Missing People

  Tags:  headlinehackerprivacyconference  

• 6:25

  President Trump Relaxes US Cyber-Attack Rules

   » ‎ Packet Storm Security Headlines
  President Trump Relaxes US Cyber-Attack Rules

  Tags:  headlinegovernmentusacyberwarfbinsacia  

• 5:11

  WebkitGTK+ 2.20.3 ImageBufferCairo::getImageData() Buffer Overflow

   » ‎ Packet Storm Security Exploits
  WebkitGTK+ version 2.20.3 ImageBufferCairo::getImageData() buffer overflow proof of concept exploit.

  Tags:   

• 5:11

  WebkitGTK+ 2.20.3 ImageBufferCairo::getImageData() Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  WebkitGTK+ version 2.20.3 ImageBufferCairo::getImageData() buffer overflow proof of concept exploit.

  Tags:   

• 5:11

  WebkitGTK+ 2.20.3 ImageBufferCairo::getImageData() Buffer Overflow

   » ‎ Packet Storm Security Misc. Files
  WebkitGTK+ version 2.20.3 ImageBufferCairo::getImageData() buffer overflow proof of concept exploit.

  Tags:   

• 4:13

  SEC Consult SA-20180813-0 :: SQL Injection, XSS & CSRF vulnerabilities in Pimcore

   » ‎ Full Disclosure

  Posted by SEC Consult Vulnerability Lab on Aug 16

  SEC Consult Vulnerability Lab Security Advisory < 20180813-0 >
  =======================================================================
  title: SQL Injection, XSS & CSRF vulnerabilities
  product: Pimcore
  vulnerable version: 5.2.3 and below
  fixed version: 5.3.0
  CVE number: CVE-2018-14057, CVE-2018-14058, CVE-2018-14059
  impact: High
  homepage: https://pimcore.com/en...
  

  Tags:   

• 4:11

  WordPress Export Users To CSV 1.1.1 CSV Injection

   » ‎ Packet Storm Security Exploits
  WordPress Export Users to CSV plugin version 1.1.1 suffers from a CSV injection vulnerability.

  Tags:   

• 4:11

  WordPress Export Users To CSV 1.1.1 CSV Injection

   » ‎ Packet Storm Security Recent Files
  WordPress Export Users to CSV plugin version 1.1.1 suffers from a CSV injection vulnerability.

  Tags:   

• 4:11

  WordPress Export Users To CSV 1.1.1 CSV Injection

   » ‎ Packet Storm Security Misc. Files
  WordPress Export Users to CSV plugin version 1.1.1 suffers from a CSV injection vulnerability.

  Tags:   

• 4:01

  Welcome to the Internet of Swords

   » ‎ Hack a Day

  As has been made abundantly clear by the advertising department of essentially every consumer electronics manufacturer on the planet: everything is improved by the addition of sensors and a smartphone companion app. Doesn’t matter if it’s your thermostat or your toilet, you absolutely must know at all times that it’s operating at peak efficiency. But why stop at household gadgets? What better to induct into the Internet of Things than 600 year old samurai weaponry?

  Introducing the eKatana by [Carlos Justiniano]: by adding a microcontroller and accelerometer to the handle of a practice sword, it provides data on the motion …read more

  Tags:  arduino hacks  

• 3:51

  #0daytoday #ownCloud #iOS Application 3.7.3 Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #ownCloud #iOS Application 3.7.3 Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 3:51

  #0daytoday #ownCloud iOS Application 3.7.3 Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #ownCloud iOS Application 3.7.3 Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 3:48

  #0daytoday #Atmosphere 1.x / 2.x Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Atmosphere 1.x / 2.x Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 3:27

  #0daytoday #OpenEMR 5.0.1.3 - Arbitrary File Actions Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #OpenEMR 5.0.1.3 - Arbitrary File Actions Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 3:22

  #0daytoday #TPLink #WR840N 0.9.1 3.16 - Denial of Service Exploit CVE-2018-15172 [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #TPLink #WR840N 0.9.1 3.16 - Denial of Service Exploit CVE-2018-15172 [dos #exploits #0day #Exploit]

  Tags:   

• 3:22

  #0daytoday #TP-Link WR840N 0.9.1 3.16 - Denial of Service Exploit CVE-2018-15172 [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #TP-Link WR840N 0.9.1 3.16 - Denial of Service Exploit CVE-2018-15172 [dos #exploits #0day #Exploit]

  Tags:   

• 3:21

  #0daytoday #ObserverIP Scan Tool 1.4.0.1 - Denial of Service Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #ObserverIP Scan Tool 1.4.0.1 - Denial of Service Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 3:11

  OpenEMR 5.0.1.3 File Read / Write / Delete

   » ‎ Packet Storm Security Exploits
  OpenEMR version 5.0.1.3 suffers from arbitrary file read, write, and delete vulnerabilities.

  Tags:   

• 3:11

  OpenEMR 5.0.1.3 File Read / Write / Delete

   » ‎ Packet Storm Security Recent Files
  OpenEMR version 5.0.1.3 suffers from arbitrary file read, write, and delete vulnerabilities.

  Tags:   

• 3:11

  OpenEMR 5.0.1.3 File Read / Write / Delete

   » ‎ Packet Storm Security Misc. Files
  OpenEMR version 5.0.1.3 suffers from arbitrary file read, write, and delete vulnerabilities.

  Tags:   

• 2:22

  OpenSSH 7.x Username Enumeration

   » ‎ Packet Storm Security Exploits
  OpenSSH versions 2.3 up to 7.4 suffer from a username enumeration vulnerability.

  Tags:   

• 2:22

  OpenSSH 7.x Username Enumeration

   » ‎ Packet Storm Security Recent Files
  OpenSSH versions 2.3 up to 7.4 suffer from a username enumeration vulnerability.

  Tags:   

• 2:22

  OpenSSH 7.x Username Enumeration

   » ‎ Packet Storm Security Misc. Files
  OpenSSH versions 2.3 up to 7.4 suffer from a username enumeration vulnerability.

  Tags:   

• 1:01

  Theo Jansen Invents A Faster, Simpler, Wind-Powered Strandbeest

   » ‎ Hack a Day

  [Theo Jansen] has come up with an intriguing wind-powered strandbeest which races along the beach with surprising speed and grace. According to [Jansen], it “doesn’t have hinging joints like the classical strandbeests, so they don’t get sand in their joints and you don’t have to lubricate them.” It’s called UMINAMI, which appropriately means “ocean wave” in Japanese.

  There are only videos of it in action to go on so far, but a lot can be gleaned from them. To make it easier to keep track of just a single leg, we’ve slowed things down and reddened one of them in …read more

  Tags:  robots hacks  

• 0:00

  Vuln: Microsoft Windows GDI Component CVE-2018-8394 Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Windows GDI Component CVE-2018-8394 Information Disclosure Vulnerability

  Tags:   

• 0:00

  Vuln: Microsoft Windows Graphics Component CVE-2018-8344 Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Windows Graphics Component CVE-2018-8344 Remote Code Execution Vulnerability

  Tags:   

• 0:00

  Vuln: Microsoft Windows NDIS CVE-2018-8343 Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Windows NDIS CVE-2018-8343 Local Privilege Escalation Vulnerability

  Tags:   

• 0:00

  Vuln: Microsoft Windows Shell CVE-2018-8414 Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Windows Shell CVE-2018-8414 Remote Code Execution Vulnerability

  Tags:   

• 0:00

  Vuln: Microsoft Windows DirectX Graphics Kernel CVE-2018-8406 Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Windows DirectX Graphics Kernel CVE-2018-8406 Local Privilege Escalation Vulnerability

  Tags:   

• 0:00

  Vuln: Microsoft Windows DirectX Graphics Kernel CVE-2018-8405 Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Windows DirectX Graphics Kernel CVE-2018-8405 Local Privilege Escalation Vulnerability

  Tags:   

• 0:00

  Vuln: Adobe Flash Player APSB18-25 Multiple Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Adobe Flash Player APSB18-25 Multiple Information Disclosure Vulnerabilities

  Tags:   

• 0:00

  Vuln: Microsoft .NET Framework CVE-2018-8284 Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft .NET Framework CVE-2018-8284 Remote Code Execution Vulnerability

  Tags:   

• 0:00

  Vuln: Microsoft Windows Device Guard CVE-2018-8221 Local Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Windows Device Guard CVE-2018-8221 Local Security Bypass Vulnerability

  Tags:   

• 0:00

  Vuln: Multiple Intel Processors Side Channel Attack Multiple Information Disclosure Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Multiple Intel Processors Side Channel Attack Multiple Information Disclosure Vulnerabilities

  Tags:   

• 0:00

  Vuln: Adobe Flash Player CVE-2018-12828 Unspecified Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Flash Player CVE-2018-12828 Unspecified Privilege Escalation Vulnerability

  Tags:   

• 0:00

  Vuln: Adobe Flash Player CVE-2018-12825 Unspecified Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Flash Player CVE-2018-12825 Unspecified Security Bypass Vulnerability

  Tags:   

• August 15, 2018
• 22:00

  Zener Diode Tutorial

   » ‎ Hack a Day

  We always enjoy [w2aew’s] videos, and his latest on zener diodes is no exception. In it, he asserts that all Zener diodes are not created equal. Why? You’ll have to watch the video below to find out.

  Zener diodes are one of those strange items that have several uses but are not as popular as they once were. There was a time when the Zener was a reasonable way to regulate a voltage inexpensively and easily. Unfortunately the regulation characteristics were not very good, and the power lost was very high. But that was sometimes a reasonable trade, compared to …read more

  Tags:  parts  

• 20:33

  Easy RM To MP3 Converter 2.6 Stack Buffer Overflow

   » ‎ Packet Storm Security Exploits
  Easy RM to MP3 Converter version 2.6 stack buffer overflow exploit for Windows 7.

  Tags:   

• 20:33

  Easy RM To MP3 Converter 2.6 Stack Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  Easy RM to MP3 Converter version 2.6 stack buffer overflow exploit for Windows 7.

  Tags:   

• 20:33

  Easy RM To MP3 Converter 2.6 Stack Buffer Overflow

   » ‎ Packet Storm Security Misc. Files
  Easy RM to MP3 Converter version 2.6 stack buffer overflow exploit for Windows 7.

  Tags:   

• 19:00

  Before Sending A Probe To The Sun, Make Sure It Can Take The Heat

   » ‎ Hack a Day

  This past weekend, NASA’s Parker Solar Probe took off for a journey to study our local star. While its mission is well covered by science literate media sources, the equally interesting behind-the-scenes information is a little harder to come by. For that, we have Science News who gave us a look at some of the work that went into testing the probe.

  NASA has built and tested space probes before, but none of them were destined to get as close to the sun as Parker will, creating new challenges for testing the probe. The lead engineer for the heat shield, …read more

  Tags:  space  

• 17:00

  [webapps] OpenEMR 5.0.1.3 - Arbitrary File Actions

   » ‎ Exploit-DB
  OpenEMR 5.0.1.3 - Arbitrary File Actions

  Tags:   

• 17:00

  [dos] TP-Link WR840N 0.9.1 3.16 - Denial of Service (PoC)

   » ‎ Exploit-DB
  TP-Link WR840N 0.9.1 3.16 - Denial of Service (PoC)

  Tags:   

• 17:00

  [dos] ObserverIP Scan Tool 1.4.0.1 - Denial of Service (PoC)

   » ‎ Exploit-DB
  ObserverIP Scan Tool 1.4.0.1 - Denial of Service (PoC)

  Tags:   

• 17:00

  [local] WebkitGTK+ 2.20.3 - 'ImageBufferCairo::getImageData()' Buffer Overflow (PoC)

   » ‎ Exploit-DB
  WebkitGTK+ 2.20.3 - 'ImageBufferCairo::getImageData()' Buffer Overflow (PoC)

  Tags:   

• 17:00

  [webapps] Wordpress Plugin Export Users to CSV 1.1.1 - CSV Injection

   » ‎ Exploit-DB
  WordPress Plugin Export Users to CSV 1.1.1 - CSV Injection

  Tags:   

• 17:00

  [dos] Central Management Software 1.4.13 - Denial of Service (PoC)

   » ‎ Exploit-DB
  Central Management Software 1.4.13 - Denial of Service (PoC)

  Tags:   

• 17:00

  [webapps] Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery

   » ‎ Exploit-DB
  Pimcore 5.2.3 - SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery

  Tags:   

• 17:00

  [remote] OpenSSH 2.3 < 7.4 - Username Enumeration (PoC)

   » ‎ Exploit-DB
  OpenSSH 2.3

  Tags:   

• 16:00

  Every Shop Needs A Giant Wooden Utility Knife

   » ‎ Hack a Day

  Generally speaking, we don’t cover that many woodworking projects here at Hackaday. What’s the point? It’s bad enough that wood reminds us of the outside world, but it hardly ever blinks, and forget about connecting it to Wi-Fi. This doesn’t seem to bother you fine readers, so we have to assume most of you feel the same way. But while we might not always “get” large woodworking projects around these parts, we’re quite familiar with the obsession dedication required to work on a project for no other reason than to say you managed to pull it off.

  On that note, …read more

  Tags:  tool hacks  

• 15:58

  #0daytoday #cPanel Filename Based Stored XSS &lt; v76 Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #cPanel Filename Based Stored XSS &lt; v76 Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 15:58

  #0daytoday #cPanel 76 Filename Based Stored XSS Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #cPanel 76 Filename Based Stored XSS Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 13:52

  #0daytoday #ASUSTOR ADM 3.1.0.RFQ3 - Remote Command Execution / SQL Injection Vulnerabilities [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #ASUSTOR ADM 3.1.0.RFQ3 - Remote Command Execution / SQL Injection Vulnerabilities [#0day #Exploit]

  Tags:   

• 13:52

  #0daytoday #ASUS-DSL N10 1.1.2.2_17 - Authentication Bypass Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #ASUS-DSL N10 1.1.2.2_17 - Authentication Bypass Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

  Tags:   

• 13:51

  #0daytoday #JioFi 4G M2S 1.0.2 - Denial of Service Exploit CVE-2018-15181 [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #JioFi 4G M2S 1.0.2 - Denial of Service Exploit CVE-2018-15181 [dos #exploits #0day #Exploit]

  Tags:   

• 13:00

  Don’t Forget Your Mints When Using This Synthesizer

   » ‎ Hack a Day

  While synthesizers in the music world are incredibly common, they’re not all keyboard-based instruments as you might be imagining. Especially if you’re trying to get a specific feel or sound from a synthesizer in order to mimic a real instrument, there might be a better style synth that you can use. One of these types is the breath controller, a synthesizer specifically built to mimic the sound of wind instruments using the actual breath from a physical person. Available breath controllers can be pricey, though, so [Andrey] built his own.

  To build the synthesizer, [Andrey] used a melodica hose and …read more

  Tags:  musical hacks  

• 11:37

  ownCloud iOS Application 3.7.3 Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  ownCloud version 3.7.3 for iOS suffers from a cross site scripting vulnerability.

  Tags:   

• 11:37

  ownCloud iOS Application 3.7.3 Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  ownCloud version 3.7.3 for iOS suffers from a cross site scripting vulnerability.

  Tags:   

• 11:37

  ownCloud iOS Application 3.7.3 Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  ownCloud version 3.7.3 for iOS suffers from a cross site scripting vulnerability.

  Tags:   

• 11:35

  Atmosphere 1.x / 2.x Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Async-IO.org Atmosphere suffers from a cross site scripting vulnerability. Versions affected include 2.4.0 through 2.4.28, 2.3.0 through 2.3.9, 2.2.0 through 2.2.12, 2.1.0 through 2.1.13, 2.0.0 through 2.0.11, and 1.0.0 through 1.0.20.

  Tags:   

• 11:35

  Atmosphere 1.x / 2.x Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  Async-IO.org Atmosphere suffers from a cross site scripting vulnerability. Versions affected include 2.4.0 through 2.4.28, 2.3.0 through 2.3.9, 2.2.0 through 2.2.12, 2.1.0 through 2.1.13, 2.0.0 through 2.0.11, and 1.0.0 through 1.0.20.

  Tags:   

• 11:35

  Atmosphere 1.x / 2.x Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  Async-IO.org Atmosphere suffers from a cross site scripting vulnerability. Versions affected include 2.4.0 through 2.4.28, 2.3.0 through 2.3.9, 2.2.0 through 2.2.12, 2.1.0 through 2.1.13, 2.0.0 through 2.0.11, and 1.0.0 through 1.0.20.

  Tags:   

• 11:30

  Rover V2 Handles Stairs as Easily as the Outdoors

   » ‎ Hack a Day

  Rover V2 is an open-source, 3D-printable robotic rover platform that has seen a lot of evolution and development from its creator, [tlalexander]. There are a number of interesting things about Rover V2’s design, such as the way the wheel hubs themselves contain motors and custom planetary gearboxes. This system is compact and keeps weight down low to the ground, which helps keep a rover stable. The platform is all wheel drive, and moving parts like the suspension are kept high up, as far away from the ground as possible. Software is a custom Python stack running on a Raspberry Pi …read more

  Tags:  raspberry  

• 10:17

  Red Hat Security Advisory 2018-2404-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2404-01 - The rhev-hypervisor7 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent. Issues addressed include an L1TF problem.

  Tags:   

• 10:17

  Red Hat Security Advisory 2018-2404-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2404-01 - The rhev-hypervisor7 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent. Issues addressed include an L1TF problem.

  Tags:   

• 10:17

  Red Hat Security Advisory 2018-2404-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2404-01 - The rhev-hypervisor7 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent. Issues addressed include an L1TF problem.

  Tags:   

• 10:17

  Red Hat Security Advisory 2018-2423-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2423-01 - Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red Hat JBoss Enterprise Application Platform 7.1.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include denial of service and traversal vulnerabilities.

  Tags:   

• 10:17

  Red Hat Security Advisory 2018-2423-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2423-01 - Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red Hat JBoss Enterprise Application Platform 7.1.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include denial of service and traversal vulnerabilities.

  Tags:   

• 10:17

  Red Hat Security Advisory 2018-2423-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2423-01 - Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red Hat JBoss Enterprise Application Platform 7.1.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include denial of service and traversal vulnerabilities.

  Tags:   

• 10:17

  Red Hat Security Advisory 2018-2424-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2424-01 - Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red Hat JBoss Enterprise Application Platform 7.1.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include denial of service and traversal vulnerabilities.

  Tags:   

• 10:17

  Red Hat Security Advisory 2018-2424-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2424-01 - Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red Hat JBoss Enterprise Application Platform 7.1.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include denial of service and traversal vulnerabilities.

  Tags:   

• 10:17

  Red Hat Security Advisory 2018-2424-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2424-01 - Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red Hat JBoss Enterprise Application Platform 7.1.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include denial of service and traversal vulnerabilities.

  Tags:   

• 10:16

  Red Hat Security Advisory 2018-2428-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2428-01 - Red Hat Single Sign-On 7.2 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.2.4 serves as a replacement for Red Hat Single Sign-On 7.2.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include denial of service and traversal vulnerabilities.

  Tags:   

• 10:16

  Red Hat Security Advisory 2018-2428-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-2428-01 - Red Hat Single Sign-On 7.2 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.2.4 serves as a replacement for Red Hat Single Sign-On 7.2.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include denial of service and traversal vulnerabilities.

  Tags:   

• 10:16

  Red Hat Security Advisory 2018-2428-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-2428-01 - Red Hat Single Sign-On 7.2 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.2.4 serves as a replacement for Red Hat Single Sign-On 7.2.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include denial of service and traversal vulnerabilities.

  Tags:   

• 10:16

  Red Hat Security Advisory 2018-2425-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-2425-01 - Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on Wildfly. This release of Red Hat JBoss Enterprise Application Platform 7.1.4 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.1.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include denial of service and traversal vulnerabilities.

  Tags: