There is a use-after-free security vulnerability in WebCore::TreeScope::documentScope in WebKit.
Source: WebKit WebCore::TreeScope::documentScope Use-After-Free
The post WebKit WebCore::TreeScope::documentScope Use-After-Free appeared first on MondoUnix.
MyTy versions 5.0.4 through 5.1.7 suffer from a cross site scripting vulnerability.
Source: MyTy 5.1.7 Cross Site Scripting
The post MyTy 5.1.7 Cross Site Scripting appeared first on MondoUnix.
MyTy versions 5.0.4 through 5.1.6 suffer from a remote blind SQL injection vulnerability.
Source: MyTy 5.1.6 Blind SQL Injection
The post MyTy 5.1.6 Blind SQL Injection appeared first on MondoUnix.
WordPress Breezing Forms plugin version 1.2.7.42 suffers from a cross site scripting vulnerability.
Source: WordPress Breezing Forms 1.2.7.42 Cross Site Scripting
The post WordPress Breezing Forms 1.2.7.42 Cross Site Scripting appeared first on MondoUn…
Secondo un recente studio condotto dai team della University of California, dalla Czech Technical University, dalla Northeastern University, Irvine e dalla Microsoft Research, oltre l’82% del codice presente su GitHub sarebbe un mero clone di fil…
Oramai i certificati SSL sono -praticamente- la norma: utilizzati per crittografare i dati tra due punti (ad esempio, il vostro browser ed il web server), li troviamo dai siti delle banche ai social network, nei software di chat … [Visita il sit…
Cracking rete WIFI WPA2 con Debian Stretch e Fluxion Dopo avere installato Fluxion su Debian Stretch, il passo successivo è quello di provare a craccare la password di una rete wifi con cifratura WPA2. Con Fluxion si può tentare un attacco cercando di recuperare la password contando sull’ingenuità dell’utente che si collega, certamente è … Leggi tutto “Cracking rete WIFI WPA2 con Debian Stretch e Fluxion”
The post Cracking rete WIFI WPA2 con Debian Stretch e Fluxion appeared first on Edmond’s Weblog.
Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other to…
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take […]
The post Faraday 2.7.1 appeared first on MondoUnix.
It was discovered that the nt!NtQueryDirectoryFile system call discloses portions of uninitialized pool memory to user-mode clients on Windows 10, due to uninitialized fields in the output structure being copied to the application.
Source: Microsoft Wi…
