WordPress Yet Another Related Posts plugin versions 4.2.4 and below suffer from cross site request forgery, remote code execution, and cross site scripting vulnerabilities.
Monthly Archives: May 2015
MacKeeper URL Handler Remote Code Execution
MacKeeper suffers from a remote code execution vulnerability in the URL handler. Included in this bundle is the advisory and the source code to the proof of concept.
Mandriva Linux Security Advisory 2015-232
Mandriva Linux Security Advisory 2015-232 – A malformed certificate input could cause a heap overflow read in the DER decoding functions of Libtasn1. The heap overflow happens in the function _asn1_extract_der_octet().
Feed2JS 1.7 Cross Site Scripting
Feed2JS version 1.7 suffers from a cross site scripting vulnerability.
Debian Security Advisory 3253-1
Debian Linux Security Advisory 3253-1 – Pound, a HTTP reverse proxy and load balancer, had several issues related to vulnerabilities in the Secure Sockets Layer (SSL) protocol.
Debian Security Advisory 3251-2
Debian Linux Security Advisory 3251-2 – The update for dnsmasq issued as DSA-3251-1 introduced a regression for the armel and armhf builds causing dnsmasq failing to start under certain configurations. Updated packages are now available to address this regression. Additionally dnsmasq was patched to handle the case were the libc headers defined SO_REUSEPORT, but is not supported by the running kernel.
New Malicious Office Docs Trick
Smart Cities – Intelligent but Vulnerable
Air conditioning that is shutting off automatically once you leave the building, apartments who call the fire department when it’s burning – those are just some of the things that scientist Anthony Towsned describes in his book “Smart Cities: Big Data, Civic Hackers, and the Quest for a New Utopia”.
And some of what you’d dream up for smart cities is already reality! Just take a look at New Songdo, a city that’s being built in South Korea. Trash, transportation and energy will all be controlled centrally. Residents are going to use smart cards as an ID, key, and payment method. Sounds innovative and like a dream, right?
Now if you believe this to be cool, just imagine what a paradise it will prove to be for hackers! Even now with the limited interconnection we have it is already possible to mess with traffic lights to jam roads and reroute cars. A lack of quality encryption makes it easy for hackers to just invade the system and screw around with it.
The more technology a city is using the more it becomes vulnerable to cyberattacks; the smartest cities are at risk the most, says Cesar Cerrudo, an Argentinian security researcher. He suggest that smart cities should secure their networks better to prevent scenarios like the one above. Let’s just hope that people take his advice seriously, otherwhise the dream of a smart city might end up to be a nightmare.
Head over to Golem.de to read the whole article (only available in German).
The post Smart Cities – Intelligent but Vulnerable appeared first on Avira Blog.