CVE-2014-7984

CVE-2014-7984 affects Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3. It enables remote attackers to authenticate and bypass intended restrictions via vectors involving Gmail authentication, as noted by multiple sources (NVD/Red Hat/CVE records). The advisory highlights a login/authenticati...

CVE-2014-7984

Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to authenticate and bypass intended restrictions via vectors involving GMail authentication...

Debian Security Advisory DSA 3028-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian OpenVAS Vulnerability Test $Id: deb3028.nasl 6735 2017-07-17 09:56:49Z teissa $ Auto-generated from advisory DSA 3028-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2014 Greenbone Networks GmbH...

5 Million Gmail Usernames and Passwords Leaked online, Check Yours Now

.jpg.jpg Gmail credentials leaked online? Oh my God! Again I have to change my password…!! Yes, you heard right. Millions of Gmail account credentials email address and password have been stolen and made publicly available through an online forum, causing a large number of users worldwide to chan...

Android Side-Channel Hack Leads to Data Loss at USENIX

A weakness in Android, one that’s likely also found in other leading operating systems, allows an attacker to infer what’s happening on a victim’s user interface and launch an appropriate secondary attack resulting in data loss. Researchers from the University of Michigan and the University of...

Researchers to 9 2% The success rate of hijacking the Gmail application-vulnerability warning-the black bar safety net

You from a third party site to download a Wallpaper application, it does not require any permissions, so you figure it won't be the malicious applications. But the University of California, Riverside researchers published a study PDF that does not require any permission the app can also steal you...

Hacking Gmail App with 92 Percent Success Rate

A group of security researchers has successfully discovered a method to hack into six out of seven popular Smartphone apps, including Gmail across all the three platforms - Android, Windows, and iOS operating systems - with shockingly high success rate of up to 92 percent. Computer scientists the...

iPhone vulnerability allows the phone to automatically dial expensive toll-vulnerability warning-the black bar safety net

Developer Andrei Neculaesei,found that although Safari will ask the user whether to make a call, but like Facebook Messenger and Google+, etc. most big name applications are not and the user to confirm whether to dial the telephone, but simply go ahead and make the call. Andrei Neculaesei create ...

Google Tweaks Gmail to Help Limit Spam

Google is making a small, but potentially important, change to the way that Gmail handles some special characters in messages as a way to defeat a common tactic used by spammers to confuse recipients and trick them into opening emails. In the early days of email, getting junk messages into the...

End-to-End Encryption for Yahoo Mail Coming Next Year

Today at Black Hat 2014 hacking conference, Yahoo! Chief Information Security Officer Alex Stamos announced that the company will start giving its consumers the option of end-to-end encryption in its Mail service by next year. Google showed off a PGP-based encryption plugin for Gmail back in June...

Five Year Old Phishing Campaign Unveiled

UPDATE: A previous version of this story reported that Cyphort found 300,000 stolen credentials on a Gmail server. This figure was incorrectly reported by the firm and has been corrected to the adjusted number, 2,500 stolen credentials, in this story. Details have been disclosed on a five-year-ol...

Gmail App for iOS leaves Users vulnerable to Man-in-the-Middle Attacks

Google has failed to provide a very important security measure in its Gmail application for iOS that left millions of its Apple device users to Man-in-the-Middle MitM attacks capable of monitoring encrypted email communications. Researcher at mobile security firm Lacoon has discovered that Google...

No Certificate Pinning Exposes Encrypted iOS Gmail Comms

UPDATE: Updated with comment and clarification from Google. Researchers say that Google’s Gmail application for iOS fails to perform a task called certificate pinning under certain conditions, which could expose the users of affected devices to man-in-the-middle attacks capable of monitoring...

BroadWin WebAccess SCADA/HMI Client Remote Code Execution

No description provided by source. html bBroadWin WebAccess SCADA/HMI Remote Code Execution Vulnerability 0day/bbrbr WebAccess is the first fully web browser-based software package forbr human-machine interfaces HMI, and supervisory control and databr acquisition SCADA. bwocxrun.ocx ActiveX...

Google Gmail IOS Mobile Application - Persistent / Stored XSS

No description provided by source. Title: ====== Gmail IOS Application Attachment Cross Site Scripting Date: ===== 2013-11-11 Introduction: ============= Gmail is a free, advertising-supported email service provided by Google. Users may access Gmail as secure webmail, as well as via POP3 or IMAP4...

I-net Multi User Email Script SQLi Vulnerability

No description provided by source. Name : I-net Multi User Email Script SQLi Vulnerability Date : june, 27 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r...

SimpleBlog <= 2.0 (comments.asp) Remote SQL Injection Vulnerability

No description provided by source. SimpleBlog 2.0 = comments.asp SQL Injection Exploit - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] Googledork | Powered By SimpleBlog 2.0 - - - - - - - - - - - - - - - - - - -...

os-x/ppc sync(), reboot() 32 bytes

No description provided by source. / MacOSX/PowerPC Shellcode for: sync, reboot 32 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include stdio.h include string.h char shellcode = \x7c\x63\x1a\x79 \x39\x40\x01\x06 \x38\x0a\xff\x1e \x44\xff\xff\x02 \x60\x60\x60\x60 \x39\x40\x01\x19...

Windows Media Player 11.0.0 (.wav) - Crash PoC

No description provided by source. Title : Windows Media Player 11.0.0 .wav Crash PoC Date: 2013-01-12 Software Link: http://windows.microsoft.com/fr-fr/windows/windows-media-player Vendor : http://www.commentcamarche.net/download/start/telecharger-34055100-windows-media-player Author: Asesino04...

Uzbey: email field doesn't filtered against XSS

Hi, Pre-configuration, create new contact in Gmail with mail a" 1. Go to Invites. 2. Click on Invite Gmail Friends. 3. Accept the pop up. 4. XSS will activate on the email field. Few issues continue during this issue: 1. When you click on this email address you get failure on AJAX functionally. 2...