Security
-
Android Vulnerability Leaks Sensitive Data through WiFi Broadcast
A vulnerability has been found in the Android operating system which broadcasts sensitive system data through WiFi broadcasting signals. This vulnerability is found to send out this data to all applications on the device to use as desired. This means that your WiFi network name, BSSID, local IP addresses, DNS…
-
Linux Kernel 4.20 to drop NSA-developed Speck Algorithm
Linux kernel is one of the most common kernels found underlying operating systems. Its latest released version is 4.18.5 and its most recent preview is of the 4.19-rc2 version. With those two versions shining under the spotlight, news has emerged that in the kernel’s version 4.20, the developers are going…
-
User Impersonation Vulnerability found in ownCloud v0.1.2
ownCloud is a client-server software which grants administrators several privileges such as carrying out commands by acting as the intended user, essentially impersonating another user to carry out desired tasks. For security reasons, group administrators are only able to do things under the umbrella of fellow group member users. Despite…
-
Q4OS v2.6 updates Trinity to version 14.0.5
The Debain-based Linux distribution Q4OS has just released its version 2.6. Still a part of the version 2.x branch, this update doesn’t introduce anything substantially noteworthy. The Q4OS distribution comes with either the Trinity desktop or the KDE Plasma 5 as seen in several recent Linux distributions. In that context,…
-
Nitrux 1.0.15 brings Kernel 4.18.5 and Plasma 5.13.4 for Most Secure and Integrated Performance Yet
Nitrux 1.0.15 has just hit the shelves following a release statement last week. Nitrux is an Ubuntu-based desktop Linux distribution operating system. Its most prominent feature is its Nomad desktop which integrates the K Desktop Environment (KDE)’s plasma desktop with enhanced and specialized graphics and display design. When this distribution…
-
Linux From Scratch & Beyond Linux From Scratch 8.3 Release uses Linux Kernel 4.18.5
Linux From Scratch version 8.3 has been announced by its renowned editor, Bruce Dubbs, along with Beyond Linux From Scratch on the 2nd of September, 2018. Linux From Scratch is a community oriented project that serves as an essential handbook and guide to creating one’s own Linux System from scratch.…
-
A Round Up of Firefox Updates: v62.0 Brings CSS Shape and Font Support
Mozilla has pushed out a whole round of updates to its web browsing products over the last few days. Mozilla Firefox’s Version 62.0 was released just a few days ago on the 5th of September for the desktop using mass public. Version 62.0.1 was just released on the 7th of…
-
CSRF Vulnerability in phpMyAdmin 4.7.x Lets Attackers Delete Records through malicious URLs
A Cross-Site Request Forgery (CSRF) vulnerability has been found in the phpMyAdmin version 4.7.x (before version 4.7.7) through which malicious attackers are able to perform fundamental database operations by tricking users into clicking on maliciously crafted URLs. This vulnerability has been combined under the CVE identification label CVE-2017-1000499 which was…
-
DoS Vulnerability found in the New Contact Name Field of Microsoft’s People Application
Microsoft has its own centralized address book that combines all your social calls, communications, and connections into one place under the umbrella of its People app. A denial of service vulnerability has been found in the Microsoft people version 10.1807.2131.0 by LORD on the 4th of September, 2018. This vulnerability…
-
Local Privilege Escalation Vulnerability found in Go Pro Fusion Studio v1.2
A local privilege escalation vulnerability exists in the Go Pro Fusion Studio version 1.2. Go Pro Fusion Studio is a specially designed editing software that incorporates all footage editing and modifying features specifically for media created using the Go Pro camera range. Both the Go Pro cameras and the Go…
-
MEGA Updates Chrome’s trojaned Extension with a cleaner Version 3.39.5
MEGA Chrome’s trojaned extension was updated with a cleaner version 3.39.5 after an unknown attacker uploaded the trojaned version to the web store of Google Chrome on 4th of September. Upon autoupdate or installation, the Chrome extension would ask for elevated permissions that originally are not required by the real…
-
DoS & Memory Corruption Vulnerabilities found in Skype Empresarial v16.0.10730.20053
A denial of service vulnerability has been found in the Skype Empresarial Office 365 version 16.0.10730.20053. It was first discovered by Samuel Cruz on the 20th of August, 2018. According to the information brought forward by Cruz, this particular vulnerability was only tested on version 16.0.10703.20053 of Skype Empresarial. Furthermore,…
-
Nord VPN v6.14.31 suffers from Local Vector DoS Vulnerability
A denial of service vulnerability was found in the Nord VPN version 6.14.31 on the 30th of August, 2018. This vulnerability was discovered by LORD (borna nematzadeh) who also provided a proof of concept for the exploit. According to LORD’s experimentation with it, the exploit exists in version 6.14.31 of…
-
Amazon Alexa Security Risk Allows Hackers to Take Over Voice Commands, Steal Private Information
The world is changing and in the modern era, we are becoming reliant on our Internet of Things devices by the day. But this reliances could cost us everything, it could allow someone to steal our identity, bank information, medical history, and what not. Amazon Alexa has been criticised for…
-
Data Backed Up from WhatsApp to Google Drive Will Be ‘plaintext’
According to a recent announcement by Google, Android and iOS users will now be able to backup their Whatsapp data on Google Drive without worrying about storage space. This feature would help save storage space on your Google Drive and will secure your data. But secure will it be? Because Google…
-
Slackware Releases L1TF Mitigation Updates for v14.2
The Slackware Linux Project team has just released kernel updates for its Slackware version 14.2 which was initially released on the first of July this year. According to the advisory released with the updates, the new kernel packages made available are specifically drafted to mitigate several imminent and emerging security…
-
DLL Injection and Code Execution Vulnerability in v54.5.90 lets Hackers spread Malware
A DLL hijacking injection and code execution vulnerability has been found in the cloud based storage solution: Dropbox. The vulnerability was first encountered earlier this week after it was found to affect Dropbox’s version 54.5.90. Since then, the vulnerability has been explored and researched, now making it to the front…
-
WhatsApp Vulnerable to Memory Corruption and DoS Crash with Crafted Message in v2.18.61
WhatsApp is not new to memory corruption vulnerabilities. After a series of infamous and chronically frustrating special character message circulations which would cause the application to crash fiercely until the troublesome message was deleted (note that deleting the message was a feat immensely difficult to accomplish as the application would…
-
Command Injection Vulnerability found in WordPress Plainview Activity Monitor v20161228 and Prior
A command injection vulnerability has been found in the renowned personal blogging and website creation management platform: WordPress. The vulnerability is found to exist in the Plainview Activity Monitor WordPress Plugin component, and it has been assigned a CVE identifier of CVE-2018-15877. The command injection vulnerability found in the Plainview…
-
Mitigation Updates Released by Microsoft for L1 Terminal Fault which lets Hackers Remotely Access Privileged Data
Microsoft released numerous advisories since the beginning of the year to address the speculative execution side channel hardware vulnerabilities in Intel’s Core and Xeon processors. The vulnerabilities in question were namely Spectre and Metldown. Microsoft has just now released another advisory for a speculative side channel vulnerability: the L1 Terminal…
-
SQL Injection Vulnerabilities in Seagate Personal Cloud Media Server allow Retrieval of Private Data
The Seagate Media Server is a UPnp / DLNA Network Attached Storage mechanism incorporated into the Seagate Personal Cloud for individual level use. In an advisory on the IoT security bug hunt website Summer of Pwnage, several SQL injection vulnerabilities in the Seagate Media Server were discovered and discussed, risking…
-
Adobe Patches 2 Code Execution Vulnerabilities in Photoshop CC 2017 & 2018
Hot off the discovery board is news of two important vulnerabilities that have been found in Adobe’s Photoshop CC versions 19.1.5 and prior for the 2018 edition and versions 18.1.5 and prior for the 2017 edition. The discovery of these vulnerabilities was made by a Fortinet security researcher, Kushal Arvind…
-
Spectre and Foreshadow Mitigation Updates Released for Windows 10 v1803 April Update and Server Core
After the Spectre and Metldown vulnerabilities discovered in the Intel micro processing chips widely used in computing devices, Foreshadow has come forth as the latest fundamental design induced vulnerability that plagues the Intel chip range. Although the vulnerabilities cannot be resolved as they arise from core concerns in the way…
-
Airmail 3.6 Fixes Potential URL Scheme Vulnerability
Airmail has just released an update which patches a known security vulnerability in the e-mailing service. Security analysts recently discovered that the client was vulnerable to malicious exploits that could allow foreign and unauthorized persons to access and read sent and received emails in the context of a victim user.…
-
Ghostscript Vulnerability Could Cause Data Security Breach
A vulnerability in the Ghostscript interpreter used to decipher Adobe Postscript and PDF documents online has come to light after a report by a Google security researcher, Tavis Ormandy, and a bothersome statement by Steve Giguere, an EMEA engineer for Synopsis. As the Ghostcript page descriptive language interpreter is the…