1119 matches found
Millions of Dell PCs Vulnerable to Flaw in Third-Party Component
Millions of PCs made by Dell and other OEMs are vulnerable to a flaw stemming from a component in pre-installed SupportAssist software. The flaw could enable a remote attacker to completely takeover affected devices. The high-severity vulnerability CVE-2019-12280 stems from a component in...
Security Flaw in Pre-Installed Dell Support Software Affects Million of Computers
Dell's SupportAssist utility that comes pre-installed on millions of Dell laptops and PCs contains a security vulnerability that could allow malicious software or rogue logged-in users to escalate their privileges to administrator-level and access sensitive information. Discovered by security...
Ispirithalaya Hospital Management System 0.1.2 Database Configuration Disclosure
Exploit Title : Ispirithalaya Hospital Management System 0.1.2 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : freeehospital.com Software Download Link :...
doctor-alex.ua XSS vulnerability
Open Bug Bounty ID: OBB-718822 Description| Value ---|--- Affected Website:| doctor-alex.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
A week in security (October 8 – 14)
Last week, we warned you away from some dubious Doctor Who streams, explained how Endpoint Detection and Response may not be enough, and explored what happens during a confusing supply chain story. We also showed you how to keep up with security, explained the risks of fake browser updates, and...
Avoid these Doctor Who Series 11 scams
The new season of Doctor Who has finally landed on television screens around the world, and we’ve started to see the first few signs of spam and other assorted nonsense lumbering online. A rash of YouTube accounts claiming to offer up the new series are making the rounds, all of which generally...
Apple removes top anti-malware apps from its store for “stealing data”
By Waqas Adware Doctor and Trend Micro Apps have been kicked out by Apple. Apple Inc. has always propagated its products as designed with most advanced security and privacy practices. The company has also promoted itself as the only firm that prioritizes and safeguards user privacy. The iOS and M...
No.1 Adware Removal Tool On Apple App Store Caught Spying On Mac Users
A highly popular top-tier app in Apple's Mac App Store that's designed to protect its users from adware and malware threats has been, ironically, found surreptitiously stealing their browsing history without their consent, and sending it to a server in China. What's more concerning? Even after...
No.1 Adware Removal Tool On Apple App Store Caught Spying On Mac Users
A highly popular top-tier app in Apple's Mac App Store that's designed to protect its users from adware and malware threats has been, ironically, found surreptitiously stealing their browsing history without their consent, and sending it to a server in China. What's more concerning? Even after...
Mac App Store apps are stealing user data
There is a concerning trend lately in the Mac App Store. Several security researchers have independently found different apps that are collecting sensitive user data and uploading it to servers controlled by the developer. This is referred to as exfiltrating the data. Some of this data is actuall...
Top MacOS App Exfiltrates Browser Histories Behind Users’ Backs
A top-grossing Apple App Store program called Adware Doctor is capable of sidestepping macOS security controls and surreptitiously copying a user’s entire browser history. It then sends it to a China-based domain. According to Patrick Wardle, chief research officer at Digita Security and founder ...
Popular Mac App Adware Doctor Actually Acts Like Spyware
Adware Doctor has long been one of the top-selling apps in the Mac App Store. But researchers say it harvested browsing data, and sent it to China...
doctor-canada.com XSS vulnerability
Open Bug Bounty ID: OBB-673107 Description| Value ---|--- Affected Website:| doctor-canada.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
doctor-ghasemi.ir XSS vulnerability
Open Bug Bounty ID: OBB-625682 Description| Value ---|--- Affected Website:| doctor-ghasemi.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
glassdoctor-tallahassee.com XSS vulnerability
Open Bug Bounty ID: OBB-588438 Description| Value ---|--- Affected Website:| glassdoctor-tallahassee.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
British doctor says his laptop was hacked & led to Aleppo hospital airstrike
By Uzair Amir A British surgeon and consultant David Nott was just trying This is a post from HackRead.com Read the original post: British doctor says his laptop was hacked & led to Aleppo hospital airstrike...
PHP Scripts Mall Doctor Search Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Doctor Search Script is a PHP based online doctor search website script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Doctor Search Script version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script o...
CVE-2018-6655
PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field...
