Lazarus APT Hackers are now using BMP images to hide RAT malware

A spear-phishing attack operated by a North Korean threat actor targeting its southern counterpart has been found to conceal its malicious code within a bitmap .BMP image file to drop a remote access trojan RAT capable of stealing sensitive information. Attributing the attack to the Lazarus Group...

car-loan-application-form-and-agreement.com Cross Site Scripting vulnerability OBB-1272413

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2019-16070

A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through web application form inputs...

Name+DOB+SSN=FAFSA Data Gold Mine

KrebsOnSecurity has sought to call attention to online services which expose sensitive consumer data if the user knows a handful of static details about a person that are broadly for sale in the cybercrime underground, such as name, date of birth, and Social Security Number. Perhaps the most...

wasrti.org XSS vulnerability

Open Bug Bounty ID: OBB-376057 Description| Value ---|--- Affected Website:| wasrti.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Wordpress candidate-application-form plugin file download vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. candidate-application-form is one of the plugins used to add a candidate application form to a job opening. A file download vulnerability exists in version v1.0 of the Wordpress...

CVE-2015-1000005

Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin...

CVE-2015-1000005

CVE-2015-1000005 affects the WordPress plugin Candidate Application Form (v1.0;

natwest.com XSS vulnerability

Vulnerable URL: https://www.natwest.com/apps/secure/applicationformsdda/asp/offset/formNWBoffset.asp?segment=personal=367.21=123=lol= Details: Description| Value ---|--- Patched:| Yes, at 17.02.2016 Latest check for patch:| 17.02.2016 01:27 GMT Vulnerability type:| XSS Vulnerability status:|...

Threat Outbreak Alert RuleID19028: Email Messages Distributing Malicious Software on October 28, 2015

Medium Alert ID: 41773 First Published: 2015 October 28 19:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19028 may contain the following files: Name |...

WordPress Plugin Candidate Application Form 1.0 - Arbitrary File Download

WordPress Plugin Candidate Application Form 1.0 - Arbitrary File Download Title: Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-12 Download Site: https://wordpress.org/plugins/candidate-application-form...

WordPress Candidate Application Form Plugin 1.0 - Arbitrary File Download

Candidate Application Form plugin is prone to an arbitrary file download vulnerability via "downloadpdffile.php". It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Update the plugin...

WordPress Candidate Application Form 1.0 File Download

Title: Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-12 Download Site: https://wordpress.org/plugins/candidate-application-form Vendor: https://profiles.wordpress.org/flaxlandsconsulting/ Vendor Notified:...

Candidate Application Form <= 1.3 - Unauthenticated Arbitrary File Download

Plugin is still affected and has been closed. The code in downloadpdffile.php does not do any sanity checks, allowing a remote attacker to download sensitive system files. PoC $ curl...