A serious vulnerability in the LIVE555 Streaming Media RTSP server affects popular applications, including VLC, MPlayer and others, Cisco Talos has discovered.
http://feedproxy.google.com/~r/Securityweek/~3/dZ4CIqCZnEI/flaw-media-library-impacts-vlc-other-software
With the U.S. mid-term elections just a couple of weeks away, there are continuing concerns over the security of the electronic voting procedures used by many states. These concerns range from the integrity of state voter registration databases through the compromise of individual voting machines to the accuracy of their calibration without a paper audit trail to confirm accurate vote tallying.
http://feedproxy.google.com/~r/Securityweek/~3/NVZ4gsf4d1g/securing-vote-against-increasing-threats
The patch for a recently disclosed cross-site scripting (XSS) vulnerability in Branch.io introduced another similar flaw, a security researcher revealed last week.
http://feedproxy.google.com/~r/Securityweek/~3/XE1puLvQJWY/recent-branchio-patch-creates-new-xss-flaw
Thousands of projects are possibly impacted by a jQuery File Upload plugin vulnerability that has been actively exploited in the wild, a security researcher has discovered.
http://feedproxy.google.com/~r/Securityweek/~3/ORkRWxByAzU/0-day-jquery-plugin-impacts-thousands-applications
Vulnerabilities discovered in the FreeRTOS operating system can expose a wide range of systems to attacks, including smart home devices and critical infrastructure, researchers warn.
http://feedproxy.google.com/~r/Securityweek/~3/0DBWnq0LmDI/freertos-vulnerabilities-expose-many-systems-attacks
Developers of the Drupal content management system (CMS) have patched several vulnerabilities in the 7 and 8 branches, including serious flaws that can be exploited for remote code execution.
http://feedproxy.google.com/~r/Securityweek/~3/KcXByDMSOsQ/remote-code-execution-flaws-patched-drupal
Splunk recently patched several vulnerabilities in its Enterprise and Light products, including flaws that have been rated “high severity.”
http://feedproxy.google.com/~r/Securityweek/~3/xUhHHVaICCg/splunk-patches-several-flaws-enterprise-light-products
Vulnerabilities in telepresence robots could provide an attacker not only with command execution capabilities, but also with access to a live video stream from the device, Zingbox reports.
http://feedproxy.google.com/~r/Securityweek/~3/3DMb_o6Mp0Y/flaws-open-telepresence-robots-prying-eyes
Researchers have demonstrated that the near-field communication (NFC) protocol can be used to exfiltrate small amounts of data, such as passwords and encryption keys, over relatively long distances.
http://feedproxy.google.com/~r/Securityweek/~3/XABajcfBans/nfcdrip-attack-proves-long-range-data-exfiltration-nfc
Tumblr on Wednesday disclosed a vulnerability that could have been exploited to obtain user account information, including email addresses and protected passwords.
http://feedproxy.google.com/~r/Securityweek/~3/XJewBjs–oM/tumblr-vulnerability-exposed-user-account-information