1501 matches found
Will the Real Joker’s Stash Come Forward?
For as long as scam artists have been around so too have opportunistic thieves who specialize in ripping off other scam artists. This is the story about a group of Pakistani Web site designers who apparently have made an impressive living impersonating some of the most popular and well known...
CVE-2018-1135
CVE-2018-1135 affects Moodle 3.x: an issue where students posting on forums and exporting posts to portfolios can download any stored Moodle file by altering the download URL. The vulnerability concerns the file download mechanism within Moodle’s portfolio integration (no explicit root cause deta...
Data of millions of Japanese sold on underground hacking forums
By Waqas A cybercriminal operating from outside China was found to be This is a post from HackRead.com Read the original post: Data of millions of Japanese sold on underground hacking forums...
Latin American ‘Biñeros’ Bond Over Fraudulent Purchase Scheme
A type of card-not-present fraud is spreading throughout the Latin American underground, uniting groups of malefactors in a communal effort to perpetrate it as widely and as often as possible. Cybercriminals in the region are making use of problems in the validation process for bank identificatio...
Moodle 2.x / 3.x Multiple Vulnerabilities (May 2016) - Linux
Moodle CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...
Uber: Uber employees are sharing information on productforums.google.com
@researcher found an exposed Google spreadsheet on productforums.google.com containing mostly test data. The researcher also found screenshots of Uber tools on Prezi containing driver personal information. This was result of a small research done after https://twitter.com/xKushagra released tip...
Use of ‘StegWare’ Increases in Stealth Malware Attacks
SAN FRANCISCO – Researchers are warning of an uptick in the malicious use of steganography as a vehicle for delivering malware. Steganography, they say, is increasingly becoming a go-to tool for cybercriminals not just for infection, but also command-and-control, data exfiltration and as an...
forums.abidjan.net XSS vulnerability
Open Bug Bounty ID: OBB-550038 Description| Value ---|--- Affected Website:| forums.abidjan.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Vanilla Forums Cross Site Request Forgery
Exploit Title: CSRF vulnerabilities in Vanilla Forums below 2.1.5-CVE-2017-1000432 Google Dork: NA Date: 7/1/2018 Contact: https://twitter.com/anandm47 website: https://anandtechzone.blogspot.in Exploit Author: Anand Meyyappan Vendor Homepage: https://open.vanillaforums.com Software Link:...
Vanilla 2.1.5 - Cross-Site Request Forgery
Vanilla 2.1.5 - Cross-Site Request Forgery Exploit Title: CSRF vulnerabilities in Vanilla Forums below 2.1.5-CVE-2017-1000432 Google Dork: NA Date: 7/1/2018 Contact: https://twitter.com/anandm47 website: https://anandtechzone.blogspot.in Exploit Author: Anand Meyyappan Vendor Homepage:...
Vanilla < 2.1.5 - Cross-Site Request Forgery Vulnerability
Exploit for php platform in category web applications Exploit Title: CSRF vulnerabilities in Vanilla Forums below 2.1.5-CVE-2017-1000432 Google Dork: NA Date: 7/1/2018 Contact: https://twitter.com/anandm47 website: https://anandtechzone.blogspot.in Exploit Author: Anand Meyyappan Vendor Homepage:...
Vanilla < 2.1.5 - Cross-Site Request Forgery
Exploit Title: CSRF vulnerabilities in Vanilla Forums below 2.1.5-CVE-2017-1000432 Google Dork: NA Date: 7/1/2018 Contact: https://twitter.com/anandm47 website: https://anandtechzone.blogspot.in Exploit Author: Anand Meyyappan Vendor Homepage: https://open.vanillaforums.com Software Link:...
Vanilla Forums Cross-Site Request Forgery Vulnerability
Vanilla Forums is a Canadian company Vanilla Forums PHP-based open source forum program . A cross-site request forgery vulnerability exists in versions of Vanilla Forums prior to 2.1.5. A remote attacker can exploit this vulnerability to delete topics and comments on the forum...
CVE-2017-1000432
Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access...
Cross site request forgery (csrf)
Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access...
CVE-2017-1000432
Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access...
CVE-2017-1000432
CVE-2017-1000432 affects Vanilla Forums prior to 2.1.5. The vulnerability is a Cross-Site Request Forgery (CSRF) that allows any registered user to delete topics and comments without admin rights. Root cause is CSRF in the Vanilla Forums workflow, enabling unauthorized state-changing actions. Exp...
CVE-2017-1000432
Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access...
forums.valofe.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-472724 Description| Value ---|--- Affected Website:| forums.valofe.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on IS...
