SVG file may contain a malicious JavaScript downloader. A successful implementation might result in the browser running arbitrary code on the infected system.
Monthly Archives: November 2016
Showrooming this shopping season? Protect yourself with a VPN.
During Black Friday and the weeks leading up to Christmas, tech savvy shoppers visit brick-and-mortar stores to see the items they want to buy, but they use price comparison apps on their phones to check for the best deal. This is called “showrooming”. Shopping apps do things like scan barcodes for price comparisons between your local retailer and online stores, send alerts when the price drops, find money-saving coupons, and even tell which stores in the mall have a particular item on sale.
![]()
DSA-3723 gst-plugins-good1.0 – security update
Chris Evans discovered that the GStreamer 1.0 plugin used to decode
files in the FLIC format allowed execution of arbitrary code. Further
details can be found in his advisory at
https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing-exploitation.html
DSA-3724 gst-plugins-good0.10 – security update
Chris Evans discovered that the GStreamer 0.10 plugin used to decode
files in the FLIC format allowed execution of arbitrary code. Further
details can be found in his advisory at
https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing-exploitation.html
Vuln: LXC CVE-2016-8649 Directory Traversal Vulnerability
LXC CVE-2016-8649 Directory Traversal Vulnerability
Vuln: w3m Multiple Security Vulnerabilities
w3m Multiple Security Vulnerabilities
Vuln: GStreamer Good Plug-ins Multiple Buffer Overflow Vulnerabilities
GStreamer Good Plug-ins Multiple Buffer Overflow Vulnerabilities
Block unwanted calls on your iPhone
Back in the day when families had one phone in the house, it was guaranteed that as they sat down to dinner, a telemarketer would call. Now that we carry our phones with us, we can be interrupted at any time by telemarketers, robocallers, scammers, political campaigners, and even the crazy ex.
![]()
Stored Cross-Site Scripting in Gallery – Image Gallery WordPress Plugin
Posted by Summer of Pwnage on Nov 23
————————————————————————
Stored Cross-Site Scripting in Gallery – Image Gallery WordPress Plugin
————————————————————————
Sipke Mellema, July 2016
————————————————————————
Abstract
————————————————————————
A persistent Cross-Site Scripting vulnerability was…
Your Headphones Can Spy On You — Even If You Have Disabled Microphone
Have you considered the possibility that someone could be watching you through your webcam? Or Listening to all your conversations through your laptop’s microphone?
Even a bit of thought about this probability could make you feel incredibly creepy.
But most people think that they have a solution to these major issues i.e. simply covering their laptop’s webcam and microphone with tape, just
![]()
