CSRF Flaw Patched in Popular Spring Social Core Library
Spring Social, a popular Java library used for social authentication, patched a risky cross-site request forgery vulnerability.
Vulnerabilities
One BadBarcode Spoils Whole Bunch
At PacSec 2015, researchers demonstrated attacks using poisoned barcodes scanned by numerous keyboard wedge barcode scanners to open a shell on a machine and virtually type control commands.
Exploit Writing and Mitigation Going Hand in Hand
Researchers at Endgame shared how two exploit mitigations could go a long way toward wiping out a nasty class of vulnerabilities.
Microsoft addressed an issue in its hypervisor, Hyper-V, this week, that could lead to a denial of service condition.
Microsoft pushed out 12 bulletins as part of November’s Patch Tuesday, including four critical updates, all of which can lead to remote code execution.
Adobe patched 17 critical remote code execution vulnerabilities in Flash Player.
Researchers have built proof-of-concept exploits for an unpatched unserialize vulnerability in Apache Commons Collections, a library used in most Java rollouts.
Certificate authority Comodo admits it incorrectly issued eight certificates that include forbidden internal server names or reserved IP addresses.
Nearly two dozen critical SAP HANA vulnerabilities have been patched, including a critical misconfiguration of the TrexNet administrative interface.
Google’s Project Zero tested the security of one of its biggest OEM partners, Samsung, finding 11 critical vulnerabilities in the Galaxy S6 Edge.
