CVE-2014-3648

The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is user controlled. If a bogus applications is registered with bad deviceTokens, one can generate endless exceptions when those endpoints can't be reached...

MAL-2022-742 Malicious code in @xvideos/anonymizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fcde639cf2cd959685a83f2737d06adacf838b4f2cc52efaf15d947acb63acb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TeleGrab Malware Steals Telegram Desktop Messaging Sessions, Steam Credentials

Recently discovered malware steals cache data and secure messaging sessions from the desktop version of encrypted messaging service Telegram. The malware, dubbed TeleGrab, leverages weak default settings in the design of Telegram’s desktop version along with the desktop’s lack of support for Secr...

Killchain - A Unified Console To Perform The "Kill Chain" Stages Of Attacks

“Kill Chain” is a unified console with an anonymizer that will perform these stages of attacks: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Dependant tool sets are: 1 Tor -- For the console build in anonymizer. 2 Set -- Social-Engineer Toolkit SET,...

anonymizers+java+javascript.txt

Date: Tue, 13 Apr 1999 20:14:49 +0200 From: Patrick Oonk To: [email protected] Subject: Serious security holes in web anonimyzing services From: "Richard M. Smith" Subject: Serious security holes in Web anonymizing services Date: Sun, 11 Apr 1999 19:23:25 -0400 Newsgroups: comp.security.misc...