Microsoft vulnerabilities

    So it seems like Microsoft had some vulnerabilities that were undiscovered for years. In particular, MS14-070 and MS14-071. You guys might want to update your Microsoft servers and Windows computers. Source...
  2. wlanboy

    CVE-2014-4877 wget exploit

    This is a small and nasty one: The flaw is triggered when wget receives a directory listing that includes a symlink followed by a directory with the same name. The output of the LIST command would look like the following, which is not possible on a...
  3. texteditor

    Might wanna recompile or patch that OpenSSL, buddy (4/7/2014) OpenSSL's TLS ~1.0.1 through 1.0.2+ has a leak in the heatbeat extension that can cause private key...