services.airtickets.com XSS vulnerability

Vulnerable URL: http://services.airtickets.com/newsletter.asp?countryMobilePhoneCodeID=a'aa""...

An Assassin's Teapot

This teapot has two chambers. Liquid is released from one or the other depending on whether an air hole is covered. I want one...

Millions of Android Devices Using Broadcom Wi-Fi Chip Can Be Hacked Remotely

Google has released its latest monthly security update for Android devices, including a serious bug in some Broadcom Wi-Fi chipsets that affects millions of Android devices, as well as some iPhone models. Dubbed BroadPwn, the critical remote code execution vulnerability resides in Broadcom's...

UBUNTU-CVE-2016-0959

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...

CVE-2016-0959

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...

CVE-2016-0959

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...

Design/Logic Flaw

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...

CVE-2016-0959

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...

CVE-2016-0959

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...

Cross-site scripting vulnerability in the username parameter of the login.jsp file of the Air English Classroom Campus Education Cloud Platform

The Air English Classroom Campus Education Cloud Platform is a digital English online teaching system. A reflective cross-site scripting vulnerability exists in the username parameter of the login.jsp file of the Air English Classroom Campus Education Cloud Platform, due to the system's failure t...

Brutal Kangaroo: CIA-developed Malware for Hacking Air-Gapped Networks Covertly

WikiLeaks has published a new batch of the ongoing Vault 7 leak, this time detailing a tool suite – which is being used by the CIA for Microsoft Windows that targets "closed networks by air gap jumping using thumb drives," mainly implemented in enterprises and critical infrastructures. Air-gapped...

Blinking Router LEDs Leak Data From Air-Gapped Networks

Researchers have uncovered a new data extraction hole inside air-gapped networks that takes advantage of the blinking LED lights on top of routers to steal data. In a report published last week, researchers at Ben-Gurion University in Israel demonstrated how a router or switch running malware...

Remote Code Execution Vulnerability in Multiple Japan Air Self-Defense Force Products

Japan Air Self-Defense Force JASDF clock01setup.exe and others are installers for the Japan Air Self-Defense Force JASDF read screen saver. A remote code execution vulnerability exists in several JASDF products. An attacker could exploit this vulnerability to execute arbitrary code...

JVN#41185163: Installers of the screensavers provided by JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE may insecurely load Dynamic Link Libraries

Installers of the screensavers provided by JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact This vulnerability can be exploited when the following condition is met. If this vulnerabilit...

Wizz Air - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Wizz Air published at the 'play' market has multiple vulnerabilities...

SQL Injection Vulnerability in J_username Parameter of Spotlight Technology Air Quality Online Monitoring System

The Air Quality Online Monitoring System is a system produced by Spotlight Technology that can realize online automatic monitoring of regional air quality. A SQL injection vulnerability exists in the jusername parameter of Spotlight Technology's Air Quality Online Monitoring System, which allows...

SQL Injection Vulnerability in j_username Parameter of Campus Education Cloud Platform of Air English Classroom

The Air English Classroom Campus Education Cloud Platform is a digital English online teaching system. There is a SQL injection vulnerability in the jusername parameter of the Air English Classroom Campus Education Cloud Platform. It allows attackers to exploit the vulnerability to obtain sensiti...

The Time Has Arrived to Embrace Hackers

BOSTON—More than ever, hackers are getting a welcoming embrace from law enforcement, governments and business. Bug bounties and vulnerability disclosure programs are becoming the norm across industry, and hackers are no longer universally viewed as a pariah. Simultaneously, however, groups such a...

Hack'em If You Can — U.S. Air Force launches Bug Bounty Program

With the growing number of data breaches and cyber attacks, a significant number of companies and organizations have started Bug Bounty programs for encouraging hackers and bug hunters to find and responsibly report vulnerabilities in their services and get rewarded. Now, following the success of...

Air Force Hopes To Attract Hackers With Bug Bounty Program

On Wednesday, the United States Air Force became the latest division of the U.S. Armed Forces to announce a public-facing bug bounty program. The program, Hack the Air Force, invites vetted white hat security experts to hack key public-facing Air Force websites. The Air Force follows in the...