FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2016-10570)

Freefloat FTP Server is a free software package for uploading files and managing wired and wireless devices from the Swedish company Freefloat. A buffer overflow vulnerability exists in version 1.0 of FreeFloat FTP Server. A remote attacker can exploit this vulnerability to execute arbitrary code...

SQL Injection Vulnerability in Digital China Internet Behavior Management System Announce_Num Parameter

Digital China Internet Behavior Management System is an Internet behavior logging system that fully owns the network behavior analysis management system, integrating hardware and software architecture, behavior analysis engine, management and control policies, analyzing network activities in real...

SQL Injection Vulnerability in Digital China Internet Behavior Management System Announcement Parameters

Digital China Internet Behavior Management System is an Internet behavior logging system that fully owns the network behavior analysis management system, integrating hardware and software architecture, behavior analysis engine, management and control policies, analyzing network activities in real...

Shadow Brokers reveals list of Servers Hacked by the NSA

The hacker group calling itself the Shadow Brokers, who previously claimed to have leaked a portion of the NSA’s hacking tools and exploits, is back with a Bang! The Shadow Brokers published more files today, and this time the group dumped a list of foreign servers allegedly compromised by the...

china-see.com XSS vulnerability

Vulnerable URL: http://www.china-see.com/marketService.do?articleType=";alert'OPENBUGBOUNTY';// Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 19:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1106263 VIP...

Massive ATM Hack Hits 3.2 Million Indian Debit Cards — Change Your PIN Now!

India is undergoing the biggest data breaches to date with as many as 3.2 Million debit card details reportedly stolen from multiple banks and financial platforms. The massive financial breach has hit India's biggest banks including State Bank of India SBI, HDFC Bank, Yes Bank, ICICI Bank and Axi...

JasPer Denial of Service Vulnerability (CNVD-2016-10036)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer. An attacker could exploit this vulnerability to crash the application, resulting in a denial of service...

Cross-site scripting (XSS) vulnerability in China Mobile 139 Mailbox Android V6.6.1

139 Mailbox APP is a general-purpose mailbox client launched by China Mobile. A cross-site scripting XSS vulnerability exists in China Mobile 139 Mailbox Android V6.6.1. An attacker exploiting the vulnerability can insert malicious js code into the page to obtain user cookies and other informatio...

Cross-site scripting (XSS) vulnerability in China Mobile 139 Mailbox PC V2.5.1

139 Mailbox for PC is a general-purpose mailbox client launched by China Mobile. A cross-site scripting XSS vulnerability exists in China Mobile 139 Mailbox PC V2.5.1. An attacker exploiting the vulnerability can insert malicious js code into the page to obtain user cookies and other information,...

Cross-site scripting (XSS) vulnerability in China Mobile 139 Mailbox IOS V2.8.2

139 Mailbox APP is a general-purpose mailbox client launched by China Mobile. A cross-site scripting XSS vulnerability exists in China Mobile 139 Mailbox IOS V2.8.2. An attacker exploiting the vulnerability can insert malicious js code into the page to obtain user cookies and other information,...

ImageMagick heap buffer overflow vulnerability (CNVD-2016-09855)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A heap buffer overflow vulnerability exists in the 'pixel-accessor.h' script in ImageMagick version 7.0.3.0 because it fails to adequately bounds-check the data before the user provides it ...

Turkey Blocks GitHub, Google Drive and Dropbox to Censor RedHack Leaks

Turkey is again in the news for banning online services, and this time, it's a bunch of sites and services offered by big technology giants. Turkey government has reportedly blocked access to cloud storage services including Microsoft OneDrive, Dropbox, and Google Drive, as well as the code hosti...

NSA Contractor Secretly Charged With Stealing Classified Secrets

The Federal Bureau of Investigation arrested a National Security Agency contractor working for Booz Allen Hamilton and charged him with stealing highly classified documents. Harold T. Martin III, of Glen Burnie, Md was charged in a criminal complaint filed in late August that became public...

BREAKING! Another NSA Contractor Arrested For Stealing 'Secret' Documents

Another Edward Snowden? The FBI has secretly busted another National Security Agency NSA contractor over a massive secret data theft. The United States Justice Department charged Harold Thomas Martin, 51, with theft of highly classified government material, including "source codes" developed by t...

About the Cisco Internet operating system vulnerability briefings-vulnerability warning-the black bar safety net

! Recently, the Internet on disclosure related to CiscoCiscoInternetoperating system IOS, the Internetwork OperatingSystem there is a data memory leak vulnerability, CNNVD-2 0 1 6 0 9-3 4 2, CVE-2 0 1 6-6 4 1 5. The vulnerability may cause the affected network device memory data was leaked,...

China Cohen laboratory for remote intrusion Tesla Model S-vulnerability warning-the black bar safety net

! Everyone in the car when done properly the heart, the hacker may be in a 1 2 mile away will be able to hijack your car, while the remote control for your brake system. The Cohen laboratory in the fall of Tesla Today many car companies are providing car electronic control system, from the...

Leaked NSA Hacking Tools Were 'Mistakenly' Left By An Agent On A Remote Server

If you are a hacker, you might have enjoyed the NSA's private zero-day exploits, malware and hacking tools that were leaked last month. But the question is: How these hacking tools ended up into the hands of hackers? It has been found that the NSA itself was not directly hacked, but a former NSA...

PHPCMS V9 role.php file SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 role.php file, which allows attackers to exploit the vulnerability to obtai...

Android Banking Trojan First to Gain Root Privileges

Developers behind an Android banking Trojan have fortified the malware with an exploit to help it gain root privileges; this is the first time a mobile banker that tries to obtain root privileges has been seen in the wild. Researchers detected the Tordow Trojan in February, but attackers have...

Arbitrary File Deletion Vulnerability in the fileservice/FileManage.asmx?op Page of the Elearning Management System of Xinwei Software

E-learning management system is an online learning platform of Shenzhen Xinwei Software Co. The E-learning management system fileservice/FileManage.asmx?op page contains an arbitrary file deletion vulnerability that can be exploited by an attacker to delete files and folders...