Shadow Attacks Let Attackers Replace Content in Digitally Signed PDFs

Researchers have demonstrated a novel class of attacks that could allow a bad actor to potentially circumvent existing countermeasures and break the integrity protection of digitally signed PDF documents. Called "Shadow attacks" by academics from Ruhr-University Bochum, the technique uses the...

The digital entropy of death: link rot

Hot on the heels of a grim blog about digital death comes…another blog about digital death. Except in this case, the recently deceased would be the links that tie the web together, otherwise known as link rot. Link rot is a weird thing. Say I blog for Puppy Chow and I write an article about the...

The vulnerability of the Microsoft Outlook email client, which allows a hacker to replace the information

The vulnerability of the Microsoft Outlook email client is related to lack of access control. Exploiting this vulnerability allows a malicious actor to replace the content of a web page using an email with specially crafted HTML tags...

Vulnerability of Microsoft SQL Server software, allowing a malicious entity to compromise protected information

Cross-site execution of scripts in SQL Master Data Services MDS allows a malicious actor to inject a script into a user’s Internet Explorer. With the help of this script, a malicious actor can replace the content on the website, gain access to confidential information, or perform any action on th...

The vulnerability of the Serv-U File Server allows a malicious attacker to execute arbitrary JavaScript code in the user’s browser, to replace the default content, or to redirect traffic to a specified resource.

The vulnerability of the Serv-U File Server software lies in insufficient checks on the parameters transmitted by clients and the scripts used in HTM scenarios. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser, replace the displayed...

The vulnerability of the Mac OS X operating system, which allows a hacker to replace the content of text documents

The vulnerability of Mac OS X’s bidirectional text-display and text-selection functions exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the content of text documents using a specially crafted sequence of characters...

The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.

The vulnerability of the Safari browser on the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the content of web pages by using the “open window” button on the website...

The vulnerability of the iOS operating system allows a hacker to replace the content of web pages.

The vulnerability of the Safari browser’s user interface on the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a web page by changing its URL address...

ok.ru: Покупка песни дешевле, чем она стоит.

Итак, часть песен в приложении можно купить. Нажимая на кнопку купить, происходит запрос к серверу обрезано, для удобства: GET /isDownloaded;jsessionid=DZSUq1yTUMNFNcYk5-mZ10DGJbUCoNYFHRUcNNwINHoSrDkkkf4gInosiPimoqGaysNvWs7GV7fnOMGgfsbCA.hHaqWq9PyS8b9PmEoYfcA?tid=90920917758231 В ответ получаем:...

CVE-1999-0998

Cisco Cache Engine allows an attacker to replace content in the cache...

CVE-1999-0998

Cisco Cache Engine allows an attacker to replace content in the cache...

PT-1999-1517 · Cisco · Cisco Cache Engine

Name of the Vulnerable Software and Affected Versions: Cisco Cache Engine affected versions not specified Description: The issue allows an attacker to replace content in the cache. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...