Lucene search
+L

4230 matches found

ThreatPost
ThreatPost
•added 2013/07/10 2:10 p.m.•14 views

Google, Microsoft Seek Help in Lifting FISA Gag Order

Google and Microsoft have locked arms with a number of civil liberties advocates in filing a brief with the secret Foreign Intelligence Surveillance Court hoping to lift a gag order preventing the two tech giants from releasing information on their role in the NSA’s surveillance activities. To...

6.6AI score
SaveExploits0References7
ThreatPost
ThreatPost
•added 2013/06/11 9:40 a.m.•12 views

Suit Filed Against NSA, Obama Over Surveillance Program

A group of people, including a former federal prosecutor and the parents of a Navy SEAL sniper killed in action, have filed a class-action law suit against the National Security Agency, Verizon and President Obama over the NSA’s collection of cell phone data. The suit says the order that enabled...

6.7AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2013/05/20 2:27 p.m.•12 views

Web: jsessionid exposed via encoded url when using cookie based session tracking

The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id 1 via a man-in-the-middle attack ...

4.3CVSS6.3AI score0.01977EPSS
SaveExploits0References4
Check Point Advisories
Check Point Advisories
•added 2013/05/06 12:00 a.m.•9 views

OPC UA Query First Request Command

...

7AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2013/05/06 12:00 a.m.•6 views

OPC UA Query First Response Command

...

7AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2013/01/28 8:31 p.m.•17 views

Court: Government Need Not Justify Warrantless Data Requests

A Virginia appeals court on Friday denied a right-to-access order filed by the Electronic Frontier Foundation and the American Civil Liberties Union on behalf of Icelandic parliamentarian Birgitta Jonsdottir and computer security researchers Jacob Appelbaum and Rop Gonggrijp. The denial confirms ...

0.2AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/12/19 12:00 a.m.•2 views

CVE-2012-4848: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authenticated users to inject arbitrary web script or HTML via a Webconfig Users user-attribute field, as demonstrated by the 1 First Name or 2 Last Name field...

3.5CVSS5.9AI score0.00759EPSS
SaveExploits0References2
zdt
zdt
•added 2012/11/29 12:00 a.m.•37 views

Free Hosting Manager V2.0 SQL Injection Vulnerability

Free Hosting Manager is a php Script host sites Exploit Title: Free Hosting Manager V2.0 SQL Injection Vulnerability Author: Spiral E-mail: email protected Google Dork: inurl:clients/packages.php?id=1 Tested on: Windows 7 Vendor: http://www.fhm-script.com/download.php Exploit:...

7AI score
SaveExploits0
securityvulns
securityvulns
•added 2012/10/29 12:00 a.m.•126 views

ESA-2012-032: RSA BSAFE(r) Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks

ESA-2012-032.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST Browser Exploit Against SSL/TLS attacks EMC Identifier: ESA-2012-032 CVE Identifier: CVE-2011-3389 Severity Rating: CVSS v2 Base Score: 4.3...

4.3CVSS0.1AI score0.73327EPSS
SaveExploits4
Cvelist
Cvelist
•added 2012/09/17 8:00 p.m.•34 views

CVE-2012-1899

Multiple cross-site scripting XSS vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 First name, 2 Last name or 3 Email required fields...

5.8AI score0.01201EPSS
SaveExploits1References4
myhack58
myhack58
•added 2012/09/17 12:00 a.m.•22 views

Readily remember arbitrary file upload flaws and fixes-vulnerability warning-the black bar safety net

Heard readily lend good make, registration number ready to buy a membership first try Pass avatar when the first-mover can now select all of the files, selected a qq. exe, point to upload, the bottom right corner traffic moving, Tip: incorrect format, open firebug, and then upload the returned fi...

0.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/09/17 12:00 a.m.•2 views

CVE-2012-1899: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 First name, 2 Last name or 3 Email required fields...

4.3CVSS5.9AI score0.01201EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2012/09/12 7:59 p.m.•14 views

(ospfd): Assertion failure due improper length check for a received LS-Update OSPF packet

Buffer overflow in the ospflsupdlistlsa function in ospfpacket.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a Link State Update aka LS Update packet that is smaller than the length...

3.3CVSS7.5AI score0.01802EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2012/09/12 7:56 p.m.•13 views

(ospf6d): Denial of service by decoding malformed Database Description packet headers

The ospf6lsaischanged function in ospf6lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service assertion failure and daemon exit via trailing zero values in the Link State Advertisement LSA header list of an IPv6 Database...

5CVSS7.4AI score0.04668EPSS
SaveExploits0References4
The Coalfire Blog
The Coalfire Blog
•added 2012/09/11 12:14 p.m.•16 views

My DEFCON social engineering talk and DerbyCon

This year has been a year of firsts for me and for Coalfire. I was recently hired to my first Information security job as a penetration tester for Coalfire Labs, the forensic and app/network testing side of Coalfire. Many of the Coalfire Labs team attended DEFCON in Las Vegas in early August.. No...

1.1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2012/09/08 4:05 p.m.•16 views

BASTARDS!!

Last month, those assholes in the California State Assembly passed a resolution urging state educational institutions to more aggressively crack down on criticism of the State of Israel on campuses, which the resolution defines as "anti-Semitism." The anti-democratic resolution is the latest step...

6.7AI score
SaveExploits0
Fedora
Fedora
•added 2012/08/19 12:26 a.m.•26 views

[SECURITY] Fedora 17 Update: redeclipse-1.2-12.fc17

A single-player and multi-player first-person ego-shooter, built on Cube Engine 2, which lends itself toward a balanced gameplay, completely at the control of map makers, while maintaining a general theme of agility in a variety of environments. Features: Balanced gameplay, with a general theme o...

2.5AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2012/06/27 10:00 a.m.•39 views

CVE-2012-2829

Removed by vendor...

7.5CVSS9.4AI score0.01464EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/06/27 12:00 a.m.•3 views

CVE-2012-2829: Undefined Security Weakness

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element...

7.5CVSS5.9AI score0.01464EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2012/05/24 6:00 p.m.•35 views

CVE-2011-3105

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element...

6.8AI score0.01784EPSS
SaveExploits1References15
Rows per page
Query Builder