575 matches found
News Wrap: Hotel Robot Hacks, FTC Stalkerware Crackdown
Threatpost editors break down the top news stories for the week ended Oct. 25. The biggest stories include: An unsecured NFC tag opening a door to trivial exploitation of robots that are used inside Japanese hotels. The FTC has banned the sale of three apps – marketed to monitor children and...
Roblox: Insecure redirect rule results in bypassing ban redirect on certain pages
Description Account bans on Roblox work via redirect rules. If an user attempts go to a page that's outside a whitelisted set of rules, they'll be redirected back to the ban page. After researching, I've found that the following rules are whitelisted and bypass this redirect: - Any URLs ending in...
ban-tawai.com Cross Site Scripting vulnerability
Security Researcher Dipu1A Helped patch 959 vulnerabilities Received 5 Coordinated Disclosure badges Received 20 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting ban-tawai.com website and its users. Following coordinated a...
CVE-2017-18462
cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled SEC-224...
CVE-2017-18462
cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled SEC-224...
Design/Logic Flaw
cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled SEC-224...
CVE-2017-18462
cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled SEC-224...
CVE-2017-18462
cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP-based protection is enabled (SEC-224). The issue is documented across multiple sources as a vulnerability in cPanel up to version 62.0.16, with the fix in 62.0.17 identified. Root cause details are not elaborated in the provided doc...
PT-2019-8397
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.17 Description The issue allows a bypass of the CPHulk one-day ban when IP-based protection is enabled. Recommendations For versions prior to 62.0.17, update to version 62.0.17 or later to resolve the issue...
CVE-2017-18462: Undefined Security Weakness
cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled SEC-224...
Applied Cryptography is Banned in Oregon Prisons
My Applied Cryptography is on a list of books banned in Oregon prisons. It's not me -- and it's not cryptography -- it's that the prisons ban books that teach people to code. The subtitle is "Algorithms, Protocols, and Source Code in C" -- and that's the reason. My more recent Cryptography...
A week in security (June 24 – 30)
Last week on Malwarebytes Labs, we peeled back the mystery on an elusive malware campaign that relied on blank JavaScript injections, detailed for readers our latest telemetry on the tricky GreenFlash Sundown exploit, and looked at one of the top campaigns directing traffic toward scareware pages...
BlueGhost - A Network Tool Designed To Assist Blue Teams In Banning Attackers From Linux Servers
This tool utilizes various linux network tools and bash scripting to assist blue teams on defending debian and ubuntu based servers from malicious attackers. Scan/Ban shows connected IPs, scans IP addresses for open ports using nmap and whois search to gather reconnaissance on connected IPs, show...
5,000 Twitter Accounts Linked to Disinformation Campaigns
Twitter has removed six sets of accounts that the site has deemed to be devoted to coordinated, state-backed propaganda activities – totaling about 5,000 accounts in all. “We believe that people and organizations with the advantages of institutional power and which consciously abuse our service a...
Germany Talking about Banning End-to-End Encryption
Der Spiegel is reporting that the German Ministry for Internal Affairs is planning to require all Internet message services to provide plaintext messages on demand, basically outlawing strong end-to-end encryption. Anyone not complying will be blocked, although the article doesn't say how. Cory...
US Tech Giants Google, Intel, Qualcomm, Broadcom Break Up With Huawei
Google has reportedly suspended all businesses with the world's second-biggest smartphone maker, Huawei, and revoked its Android license effective immediately—a move that will have a drastic impact on Huawei devices across the globe. Revoking Android license means Huawei future smartphones will n...
US Tech Giants Google, Intel, Qualcomm, Broadcom Break Up With Huawei
Google has reportedly suspended all businesses with the world's second-biggest smartphone maker, Huawei, and revoked its Android license effective immediately—a move that will have a drastic impact on Huawei devices across the globe. Revoking Android license means Huawei future smartphones will n...
FTPShell Server 6.83 - Account name to ban Local Buffer
FTPShell Server 6.83 - Account name to ban Local Buffer !/usr/bin/python Exploit Title: FTP Shell Server 6.83 'Account name to ban' Buffer Overflow Date: 09-04-2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: http://www.ftpshell.com/index.htm Version: 6.83 Software Link :...