613 matches found
PT-2015-3891
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related to Audience in the Orac...
X (Formerly Twitter): Improper Verification of email address while saving Account Settings
Signup for Ads on twitter and navigate to "Account Settings" on ads.twitter.com/accounts Enter any email address and save Account Settings. Notice that the email address gets updated successfully. There is no verification email that is sent out to confirm that the email account updated actually...
CVE-2013-7065
The Organic Groups OG module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the oggroupref field...
CVE-2013-7065: Undefined Security Weakness
The Organic Groups OG module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the oggroupref field...
PT-2014-3257
Name of the Vulnerable Software and Affected Versions Organic Groups OG module versions 7.x-2.x through 7.x-2.2 Description The issue allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, such as the og group ref field. Recommendations For...
ABC hacked after anti-Islam politician Interview
The Australian Broadcasting Corporation ABC is investigating data breach after Lateline interviewed Dutch anti-Islam politician Geert Wilders. A hacker going by the handle "Phr0zenMyst" has claimed to have hacked a web site associated with the ABC television program Making Australia Happy, leakin...
Ascend D quad : World's fastest Android by Huawei
Ascend D quad : World's fastest Android by Huawei Huawei has introduced what it calls the world's fastest quad-core smartphone, the Huawei Ascend D quad. Powered by Huawei's K3V2 quad-core 1.2GHz/1.5GHz processor the beast comes with Android 4.0. In an aggressive presentation at the Mobile World...
Mark Russinovich on His Novel Zero Day and Coordinated Cyber Attacks
Dennis Fisher talks with Mark Russinovich of Microsoft about his novel Zero Day, the idea of a coordinated cyber attack by terrorists and the difficulty of writing a technical novel for a mainstream audience. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on Image...
More Privacy Controls Coming to Facebook
From The New York Times Riva Richmond Facebook launched a beta test today that foreshadows new privacy controls coming to “Publisher” – the box at the top of your home and profile pages where you add content. The changes will let you easily specify who among your friends gets to see that specific...
[Full-disclosure] Multiple vulnerabilities in phpMyVisites
Multiple vulnerabilities in phpMyVisites Application : phpMyVisites prior to 2.2 stable Release Date : 11 February 2007 Author : Nicob nicob at nicob.net Abstract : ========== Several vulnerabilities were identified in phpMyVisites. This software is "a free and powerful open source GNU/GPL softwa...
Defender: Platform Ring1 Audience
Detects whether this machine should get platform beta updates...