1900 matches found
Giving Red-Teamers the Blues
Pen-testing engagements are generally a breeze for most red-teamers; roadblocks are few, despite the ones in place being expensive and often paid for by very large companies. Chris Nickerson has been running such engagements for 15 years and he sees companies that throw more money and more server...
Wendy's Comes Clean On Data Breach
Fast-food chain Wendy’s disclosed it was a victim of a point-of-sale system attack that installed malware on PoS computers affecting 300 franchise restaurants. The disclosure was part the company’s first quarter 2016 SEC filings on Wednesday and is the most complete account to date of a 2015 data...
Facebook Open Sources its Capture the Flag (CTF) Platform
Hacking into computer, networks and websites could easily land you in jail. But what if you could freely test and practice your hacking skills in a legally safe environment? Facebook just open-sourced its Capture The Flag CTF platform to encourage students as well as developers to learn about cyb...
IBM's Watson Supercomputer Tackles Security
IBM is leveraging the power of its Watson supercomputer to thwart viruses, ransomware and DDoS attacks. On Tuesday it unveiled an ambitious plan to feed Watson billions of data points from security sources daily so that Watson can spot anomalies as they happen and stop them dead in their tracks...
MIT builds Artificial Intelligence system that can detect 85% of Cyber Attacks
In Brief What if we could Predict when a cyber attack is going to occur before it actually happens and prevent it? Isn't it revolutionary idea for Internet Security? Security researchers at MIT have developed a new Artificial Intelligence-based cyber security platform, called 'AI2,' which has the...
Zarafe.net CMS 1.0 SQL Injection
Exploit Title : Zarafe.net CMS SQL Injection Vulnerability Exploit Author : Iran Cyber Security Group ICSG Discovered By : 0x3a Vendor HomePage : www.zarrafe.net Version : 1.0 Q1 Date : 4 April, 2016 Tested On : Internet Explorer , Win 98 ----------------------------------------- SQL Injection :...
Warning! CCTV Cameras Sold on Amazon Come with Pre-Installed Malware
Be careful while buying any off-brand electronics from Amazon, as they could end up infecting you. Recently, independent security researcher Mike Olsen discovered that the CCTV surveillance devices sold on Amazon came with pre-installed malware. Olsen discovered this nasty secret after he bought ...
Gratipay: After removing app from facebook app session not expiring.
When a user login with facebook 0Auth and then he removes the app from facebook app setting the session is not expiring. Poc:- Step1: Go to gratipay login page. Step2: Click on login with facebook 0 auth and login with facebook. Step3: Go to facebook then app setting. Step4: Now remove the gratip...
Apple, Google Faced All Writs Act Orders
The American Civil Liberties Union has dug up more proof that from the get-go the FBI’s attempt to crack open an iPhone used by the San Bernardino shooter Syed Rizwan Farook was not just about the one phone. The ACLU found court documents and on Wednesday published an interactive map visualizing...
Dorsa Web CMS - Multiple SQL Injection Vulnerabilities
Document Title: =============== Dorsa Web CMS - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1807 Release Date: ============= 2016-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 180...
Dorsa Web CMS - Multiple SQL Injection Vulnerabilities
Document Title: =============== Dorsa Web CMS - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1807 Release Date: ============= 2016-03-30 Vulnerability Laboratory ID VL-ID: ==================================== 180...
Top Business Advertising - SQL Injection Vulnerabilities
Document Title: =============== Top Business Advertising - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1786 Release Date: ============= 2016-03-20 Vulnerability Laboratory ID VL-ID: ====================================...
Top Business Advertising - SQL Injection Vulnerabilities
Document Title: =============== Top Business Advertising - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1786 Release Date: ============= 2016-03-20 Vulnerability Laboratory ID VL-ID: ====================================...
marketplace.creighton.edu XSS vulnerability
Vulnerable URL: http://marketplace.creighton.edu/ePOS/form=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3Erobots/catalog.htmlcategory=36=813=813 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:58 GMT Vulnerability type:| XSS...
Weak Bank Password Policies Leave 350 Million Vulnerable, Say Researchers
Should passwords that protect your financial data be less secure than the ones used to lock up selfies, cat videos and tweets swapped on social networks? In a study that looked at the password strength required to access website account for Wells Fargo, Capital One and 15 other banks, researchers...
Interview Benjamin Kunz Mejri - TechTalk Cairo TV
Document Title: =============== Interview Benjamin Kunz Mejri - TechTalk Cairo TV References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1692 Video: https://www.youtube.com/watch?v=QCOgmhVuQ6w Release Date: ============= 2016-01-22 Vulnerability Laboratory ID VL-ID:...
Interview Benjamin Kunz Mejri - TechTalk Cairo TV
Document Title: =============== Interview Benjamin Kunz Mejri - TechTalk Cairo TV References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1692 Video: https://www.youtube.com/watch?v=QCOgmhVuQ6w Release Date: ============= 2016-01-22 Vulnerability Laboratory ID VL-ID:...
Casino Sues Cyber Security Company Over Failure to Stop Hackers
IT security firm Trustwave has been sued by a Las Vegas-based casino operator for conducting an allegedly "woefully inadequate" investigation following a network breach of the casino operator’s system. Affinity Gaming, an operator of 5 casinos in Nevada and 6 elsewhere in the United States, has...
Netduma R1 1.03.4 / 1.03.5 Cross Site Request Forgery
Introduction Affected Product: Netduma R1 Router Affected Versions: 1.03.4 and 1.03.5 Link: http://www.netduma.com/firmware/R1-v-1-03-4.sig Vendor Website: https://netduma.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 11/19/2015 Disclosed to public: 12/29/2015 Credits:...
Threat Outbreak Alert RuleID20223: Email Messages Distributing Malicious Software on December 22, 2015
Medium Alert ID: 42820 First Published: 2015 December 22 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20223 may contain the following files: Name |...