Author: Jason Davies

InternetNews

Firefox’s random password generator

Following Google’s move – roughly a year later – Mozilla is adding a random password generator to Firefox. Infosec reporters

Read More
NewsSocial Media

Facebook Removes Accounts Used to Infect Thousands With Malware

According to reports hackers have used more than 30 Facebook pages to spread malicious software aimed at social media users

Read More
NewsSecurity Vulnerabilities

Mongoose parse_mqtt() Function Heap-Based Buffer Overflow Vulnerability [CVE-2019-12951]

CVE Number – CVE-2019-12951 A vulnerability in Cesanta Mongoose could allow an unauthenticated, remote attacker to execute arbitrary code or

Read More
NewsSecurity Vulnerabilities

Linux Kernel TCP Connection Low Maximum Segment Size Denial of Service Vulnerability [CVE-2019-11479]

CVE Number – CVE-2019-11479 A vulnerability in the Linux Kernel could allow an unauthenticated, remote attacker to cause a denial

Read More
NewsSecurity Vulnerabilities

Linux Kernel TCP Selective Acknowledgement Segments Processing Denial of Service Vulnerability [CVE-2019-11478]

CVE Number – CVE-2019-11478 A vulnerability in the Linux Kernel could allow an unauthenticated, remote attacker to cause a denial

Read More
NewsSecurity Vulnerabilities

GNOME libcroco Heap Buffer Overread Denial of Service Vulnerability [CVE-2017-7960]

CVE Number – CVE-2017-7960 A vulnerability in the libcroco component of GNOME could allow an unauthenticated, remote attacker to cause

Read More
NewsSecurity Vulnerabilities

ImageMagick WriteTIFFImage Heap-Based Buffer Over-Read Vulnerability [CVE-2019-11597]

CVE Number – CVE-2019-11597 A vulnerability in the WriteTIFFImage function of ImageMagick could allow an unauthenticated, remote attacker to cause a denial

Read More
NewsSecurity Vulnerabilities

Spring Security PlaintextPasswordEncoder Authentication Vulnerability [CVE-2019-11272]

CVE Number – CVE-2019-11272 A vulnerability in Pivotal Software Spring Security could allow a local attacker to bypass authorization restrictions

Read More
NewsSecurity Vulnerabilities

GNU Binutils Binary File Descriptor Library Heap-Based Buffer Over-Read Vulnerability [CVE-2019-12972]

CVE Number – CVE-2019-12972 A vulnerability in the Binary File Descriptor (BFD) library, as distributed in GNU Binutils could allow

Read More
NewsSecurity Vulnerabilities

Linux Kernel nfc_genl_deactivate_target() Function NULL Pointer Dereference DoS Vulnerability [CVE-2019-12984]

CVE Number – CVE-2019-12984 A vulnerability in the nfc_genl_deactivate_target() function of the Linux Kernel could allow an unauthenticated, local attacker to cause

Read More