Developed by Open Whisper Systems, Signal is a free, open-source encrypted communications app for both mobile and desktop devices that allows users to make voice calls, send instant messages, and even make video calls securely. However, a vulnerability was recently discovered for the desktop version that can be turned into a USB Rubber Ducky payload to steal signal messages with a single click.
Signal Messenger has been extremely popular among privacy-conscious users for its blend of privacy and convenience, but this trade-off has consequences. Security researchers Alec Muffett and Patrick… more

Link: https://null-byte.wonderhowto.com/how-to/hacking-macos-steal-signal-conversations-from-macbook-with-usb-rubber-ducky-0184854/

A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 18.04 LTS
– Ubuntu 17.10
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS
Summary:
Spice could be made to crash or…

Link: http://feeds.security-database.com/~r/Last100Alerts/~3/mCBuH7Flh8o/detail.php

In MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file.

Link: http://feeds.security-database.com/~r/Last100Alerts/~3/aAL-1qSzZJM/detail.php

Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request…

Link: http://feeds.security-database.com/~r/Last100Alerts/~3/MtCd4Ahx7L0/detail.php

In MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service (assert crash) via a crafted file.

Link: http://feeds.security-database.com/~r/Last100Alerts/~3/6jhthkg5peU/detail.php

In MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file.

Link: http://feeds.security-database.com/~r/Last100Alerts/~3/wNY5fmpE0NM/detail.php

In MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memory, or cause a denial of service via a crafted file.

Link: http://feeds.security-database.com/~r/Last100Alerts/~3/ab9DeXyHHdo/detail.php

In MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program flow via a crafted file.

Link: http://feeds.security-database.com/~r/Last100Alerts/~3/NjOPaIOb3JE/detail.php