Best Free Password Manager Software You Can Download For 2018

When it comes to safeguarding your Internet security, installing an antivirus software or running a Secure Linux OS on your system does not mean you are safe enough from all kinds of cyber-threats. Today majority of Internet users are vulnerable to cyber attacks, not because they aren't using any...

OLX: Unauthorised access to olx.in user accounts.

Me and my friend, Ekansh, have found a severe security bug in your website, http://olx.in. Using this loophole one can gain full access to user accounts and perform actions like add/edit/delete ads and even delete the account itself. Please find below attached video report and an accompanying pdf...

LastPass Bug Lets Hackers Steal All Your Passwords

A critical zero-day flaw has been discovered in the popular cloud password manager LastPass that could allow any remote attacker to compromise your account completely. LastPass is one of the best password manager that also available as a browser extension that automatically fills credentials for...

Mail.ru: [opensource.mail.ru] system accounts enumeration

Добрый день. Нашел интересную вещь. Надеюсь уязвимость на самом деле существует, и я не параноик. Если аккаунт существует cat /etc/passwd | grep %accountname% то приложение редиректит 302 на /create/%accountname%/home или возвращает 200 как в случай nobody. https://opensource.mail.ru/nobody/...

Moodle 1.9.x < 1.9.17 Multiple Vulnerabilities

Binary data 9429.prm...

The vulnerability of the ABB PCM600 control and configuration device allows a intruder to access information related to user account data.

The vulnerability of the ABB PCM600 control and configuration device lies in the way authentication information is stored in a database, in the form of hexadecimal ASCII values. Exploiting this vulnerability could allow an attacker, operating locally, to gain access to information about user...

Dashlane: Missing Access Control(IDOR) To Know LinkedAccounts

Hello Team, While Digging your Application I Came to Endpoint Where I Was Able to Check Whether Email is been Used in Multiple Account's or not , And Also Email's Are Getting Leaked . You have Feature to Enter Email To get Token : F105969 As you can see from the above Screenshot , I'm Logged in a...

Django CMS v3.3.0 - (Editor Snippet) Persistent Vulnerability

Document Title: =============== Django CMS v3.3.0 - Editor Snippet Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1869 Security Release: https://www.djangoproject.com/weblog/2016/jul/18/security-releases/...

Google, Niantic to Limit Data Pokémon GO Collects

Niantic, Inc. – the company behind the ubiquitous, can’t-go-10-minutes-without-hearing-about-it Pokémon GO game – said Monday night it wasn’t the company’s intent to request full access permission of its users’ Google accounts. The company, a Google spinoff, was put in the crosshairs over its...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the function in server/content/ContentService.java of the Android operating system’s framework exists due to the lack of permission checking for GETACCOUNTS. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information...

'Dropping Elephant' APT Attackers Targets Old Windows Flaws

Don’t judge an APT by its exploits alone. That’s the takeaway from a report that details a unique advanced persistent threat that leverages a kludge of unsophisticated, outdated and rudimentary attack tools to conduct cyber espionage. The target of the attacks are government and diplomatic agenci...

The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to gain access to user account information.

In the D-Link DSR-500 router, all users are given the right to read the system password file...

The vulnerability of the Windows operating system, which allows a hacker to bypass the account locking mechanism

The vulnerability that allows bypassing the protection mechanism is related to incorrect checking of the user lock status by the SAMR protocol remote security account management...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability that allows for increased privileges is related to incorrect handling of objects in memory by the kernel-level driver in Windows. If this vulnerability is exploited successfully, a malicious individual will be able to execute arbitrary code at the kernel level. As a result, they...

The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in the Microsoft .NET Framework. This vulnerability is related to incorrect handling of localized resource identifiers. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then...

The vulnerability of the Simatic WinCC software allows a remote attacker to compromise the confidentiality of protected information.

The vulnerability exists in Web Navigator of Siemens WinCC due to the different behaviors of NetBIOS user names, depending on whether a user account exists or not. Exploiting this vulnerability allows remote users who have been authenticated to list user accounts using specially crafted URL...

The vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability in GDI+, related to the processing of specially crafted images, allows for remote execution of code provided that the user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install...

The vulnerability of the Windows operating system, which allows a malicious individual to increase their privileges

A vulnerability that allows for increased privileges exists in the Windows operating system and is related to incorrect file comparison. If exploited successfully, a malicious individual will be able to execute arbitrary code within the Local System account. They will also be able to install...

Vulnerability of the Windows operating system, allowing a malicious individual to execute arbitrary code

A vulnerability that allows for remote execution of code exists in Microsoft Windows and is related to the processing of .bat and .cmd files executed from an external network. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install...

IBM Tivoli Storage Manager Sensitive Information Disclosure Vulnerability

IBM Tivoli Storage Manager TSM is a backup and recovery management solution from IBM USA. The solution supports data protection, space management and archiving, business recovery and disaster recovery. A sensitive information disclosure vulnerability exists in IBM TSM. A local attacker could...