NVD

CVE-2016-9287 (exponent_cms)

November 15, 2016 007admin

In /framework/modules/notfound/controllers/notfoundController.php of Exponent CMS 2.4.0 patch1, untrusted input is passed into getSearchResults. The method getSearchResults is defined in the search model with the parameter ‘$term’ used directly in SQL. Impact is a SQL injection.

ESET

Adobe fined $1 million for 2013 data breach

November 15, 2016 007admin

The financial repercussions of a data breach have been highlighted by the $1 million fine handed out to Adobe Systems for a 2013 security incident.

The post Adobe fined $1 million for 2013 data breach appeared first on WeLiveSecurity.

Kaspersky

Nearly 78% say they want to leave social media but fear of losing friends and posts makes them stay

November 15, 2016 007admin

Research conducted by cybersecurity firm Kaspersky Lab shows that the vast majority of people want to leave social networks, often because they are a waste of time.

Security

Microsoft Edge CAttrArray::Destroy Use-After-Free

November 15, 2016 007admin

A specially crafted web-page can cause Microsoft Edge to free memory used for a CAttrArray object. The code continues to use the data in freed memory block immediately after freeing it. It does not appear that there is enough time between the free and reuse to exploit this issue.

Security

Windows VHDMP Arbitrary File Creation Privilege Escalation

November 15, 2016 007admin

The VHDMP driver does not safely create files related to Resilient Change Tracking leading to arbitrary file overwrites under user control leading to elevation of privilege.

Security Focus