Cyclope Employee Surveillance Solution 6.0 SQL Injection

Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution v6.0 Version: 6.0 Vendor Site: http://www.cyclope-series.com/ Software Download: http://www.cyclope-series.com/download/index.html Software description: The employee monitoring software developed by...

Cyclope Employee Surveillance Solution v6.0 SQL Injection

Exploit for php platform in category web applications Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution v6.0 Version: 6.0 Vendor Site: http://www.cyclope-series.com/ Software Download: http://www.cyclope-series.com/download/index.html Software description: T...

Cyclope Employee Surveillance Solution 6.06.1.06.2.06.2.16.3.0 - SQL Injection

Cyclope Employee Surveillance Solution 6.06.1.06.2.06.2.16.3.0 - SQL Injection Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution v6.0 Version: 6.0 Vendor Site: http://www.cyclope-series.com/ Software Download: http://www.cyclope-series.com/download/index.htm...

Cyclope Employee Surveillance Solution 6.0/6.1.0/6.2.0/6.2.1/6.3.0 - SQL Injection

Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution v6.0 Version: 6.0 Vendor Site: http://www.cyclope-series.com/ Software Download: http://www.cyclope-series.com/download/index.html Software description: The employee monitoring software developed by...

Cyclope Employee Surveillance Solution v6 SQL Injection

This module exploits a SQL injection found in Cyclope Employee Surveillance Solution. Because the login script does not properly handle the user-supplied username parameter, a malicious user can manipulate the SQL query, and allows arbitrary code execution under the context of 'SYSTEM'. Module...

Are You 'Siri-less'? Security Firm Urges Closer Look at Popular Personal Assistant App

The Finland-based security firm F-Secure is warning companies to beware of Siri, the voice-activated personal assistant app that last month was banned by IBM for security purposes. The potential for Siri-based data disclosures was cited at a Helsinki press conference, in which F-Secure’s vice...

Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities

Document Title: =============== Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=614 Release Date: ============= 2012-06-13 Vulnerability Laboratory ID VL-ID: ==================================...

Survey Shows 85 Percent of Small Business Owners Convinced a Data Breach Unlikely

If a newly released survey is any indication, publicized data breaches aren’t enough to prompt small businesses to better protect their customer or employee data. A survey released this week by The Hartford found 85 percent of small business owners believe a data breach is unlikely and often lack...

Report Predicts Huge Hike in Employers Monitoring Social Media

In addition to watching what you say at the office, you may want to be extra careful what you post about work on blogs, Facebook, YouTube and Twitter. This admonishment is not new, but a Gartner report predicts up to 60 percent of corporations worldwide will monitor employees’ social media use fo...

Car Maker Nissan Admits To Virus Infection, Loss of Employee Accounts

Car maker Nissan became the latest high profile firm to acknowledge being hacked. The company issued a statement last week saying that it detected a virus infection on its network that resulted int he theft of employee login credentials from a company data store. The intrusion was detected on Apr...

BlueCross BlueShield to Pay $1.5m for HIPAA Violation

Blue Cross Blue Shield of Tennessee agreed to pony up $1.5 million to the U.S. Department of Health and Human Services HHS for a HIPAA violation in 2009, according to a ComputerWorld report. This payment is the settlement of a violation of the Health Insurance Portability and Accountability Act...

Computershare Says No Customer Data Exposed In Breach

The investor services company told Threatpost that an investigation has determined that data stolen by a rogue employee didn’t contain shareholder data. However, the company still hasn’t retrieved two USB drives containing company email and documents that outline some of Computershare’s closely...

iGuard Biometric Access Control - Multiple Vulnerabilities

Document Title: =============== iGuard Biometric Access Control - Multiple Vulnerabilities References Source: ==================== 2011/Q3-4 Release Date: ============= 2011-11-08 Vulnerability Laboratory ID VL-ID: ==================================== 104 Product & Service Introduction:...

Insider Threats vs Hackers - by Emmett Jorgensen

Insider Threats vs Hackers - by Emmett Jorgensen Emmett Jorgensen has worked in IT and Infosec for over 10 years. He works for Kanguru Solutions www.kanguru.com, a manufacturer of secure portable storage solutions. Article taken from 'The Hacker News' Magazine - October Edition. You can Download...

Joomla Directory Tree SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Social Media Use Tied to Increase in Malware Infections

With the use of social media platforms such as Twitter, Facebook and Google+ becoming more and more prevalent in the enterprise, companies are having to come to grips with additional security concerns that they bring with them. But, according to the results of a new survey of IT and security...

Oracle, other companies hacked by Social Engineering attack in #DefCon 19

Oracle, other companies hacked by Social Engineering attack in DefCon 19 A weekend contest from 4th August to 7th August , at the world's largest hacking convention in Las Vegas showed one reason why big corporations seem to be such easy prey for cyber criminals : their workers are poorly trained...

FBI arrests AT&T employee for leaking information to Anonymous

FBI arrests AT&T employee for leaking information to Anonymous The Tech Herald reported on information given to us by Ryan Cleary shortly before his arrest. AT&T insider who handed sensitive information and a bootable USB disk over to Anonymous. On Tuesday, the FBI arrested an AT&T employee...

FBI arrests AT&T employee for leaking information to Anonymous

FBI arrests AT &T employee for leaking information toAnonymous The Tech Herald reported on information given to us by Ryan Cleary shortly before his arrest. AT&T insider who handed sensitive information and a bootable USB disk over to Anonymous. On Tuesday, the FBI arrested an AT&T employee...

Lessons from Chicago: Bad Policy, Not Geopolitics, Enables IP Theft

One thing that CME Group, the company that runs the Chicago Mercantile Exchange, wants to make perfectly clear is that it places a “high value on protecting its intellectual property and trade secrets.” That was the clear message from CME following the arrest of an employee for stealing company...