Multiple IBM Products Information Disclosure Vulnerabilities (CNVD-2016-01151)

IBM Financial Transaction Manager for ACH Services, among others, are IBM's financial transaction manager products, which are used to monitor, track and report on financial payments and transactions. A security vulnerability exists in several IBM products. A remote attacker could exploit the...

javajoescoffeehouse.com XSS vulnerability

Vulnerable URL: https://www.javajoescoffeehouse.com/shop/imageview.asp?file=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8820482...

Department of Education Lambasted Over Database Vulnerabilities

Like the Office of Personnel Management before it, the Department of Education has failed to heed repeated warnings that its systems contain multiple weaknesses. In a House Committee on Oversight and Government Reform hearing held this week, Congressman and committee chair Jason Chaffetz R-Utah...

xxl-food-house.de XSS vulnerability

Vulnerable URL: http://www.xxl-food-house.de/prettyPhotoi/x,/x Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0...

White House Support for CISA Worries Privacy Advocates

While Congress is enjoying its annual summer recess, privacy advocates are worried that the White House’s recent endorsement of the controversial CISA bill–which has been criticized by DHS officials, among others–will push the information-sharing bill over the goal line. The Cybersecurity...

Government Asks for Security Community's Help on Technical Issues

LAS VEGAS–Washington is looking for a few good hackers. Politicians and policymakers in the United States generally are not thought of as being the most technically savvy lot. It’s a reputation that’s well-earned in some cases, with some politicians boasting about their inability to use email and...

White House Says No Thanks to Snowden Pardon Petition

It’s been more than two years since Edward Snowden became a name as familiar to the millions of people who have no idea what the NSA actually does it is to the power players in Washington. In that time support for Snowden has waxed and waned, but the position of the White House on Snowden’s actio...

Feds Detail Shutdown of Cybercrime Forum Darkode

Officials worldwide this week culminated an 18-month effort to take down Darkode, a cybercrime forum where hackers fraternized, shared malware, credit card information and more. The campaign, dubbed Operation Shrouded Horizon, resulted in the arrest of 28 hackers and 27 house searches across 18...

Cyber UL Could Become Reality Under Leadership of Hacker Mudge

UPDATE–One of the longstanding problems in security–and the software industry in general–is the lack of any universally acknowledged authority on quality and reliability. But the industry moved one step closer to making such a clearinghouse a reality this week when Peiter Zatko, a longtime...

house-mouse.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-68154 Description| Value ---|--- Affected Website:| house-mouse.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

Federal Agencies to Move to HTTPS-Only Connections

Following the lead of many major Web services, the White House on Monday announced that it would move all of the federal government’s public sites and services to HTTPS-only. Tony Scott, the federal CIO, has issued a memorandum to all federal agencies and departments instructing them to move all ...

Ed Felten Joins White house as Deputy CTO

Ed Felten, a professor at Princeton University and a well-respected voice on security and privacy issues, is joining the White House as the deputy CTO. In his new role, Felten will be working under Megan Smith, the CTO of the United States and a former Google vice president. Felten has been at...

house-mouse.com XSS vulnerability

Open Bug Bounty ID: OBB-60823 Description| Value ---|--- Affected Website:| house-mouse.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Dennis Fisher and Mike Mimoso Discuss the MySQL bug, OpenSSL and the House Crypto Hearing

Dennis Fisher and Mike Mimoso discuss the post-RSA news, including the MySQL bug, the progress of the OpenSSL overhaul and the wildly entertaining House hearing on crypto backdoors. Download: digitalunderground200.mp3 Music by Chris Gonsalves...

White House, State Department Counted Among CozyDuke APT Victims

A data-mining advanced persistent threat hit a handful of high profile targets last year, including the White House’s computer network. Dubbed CozyDuke, the APT’s toolset shares several similarities with fellow APTs MiniDuke, CosmicDuke and OnionDuke. Kurt Baumgartner and Costin Raiu, researchers...

Wikileaks Publishes 30,000 Searchable Documents from the Sony Hack

Remember the largest hack on Sony Pictures Entertainment late last year? Well, nobody can forget it. But let me remind you once again: Sony Picture Entertainment hack was one of the most devastating hacks in the history that leaked several hundred gigabytes of sensitive data, including high-quali...

Microsoft warning: Windows PC there are also Freak security vulnerability-vulnerability warning-the black bar safety net

Microsoft on Friday warned that hundreds of millions of Windows PC users are facing a“Freak”security vulnerability threats, and that a newly discovered security vulnerability was initially considered only for mobile devices and Apple Mac computers pose a threat. On Tuesday, by 9 The name of...

Core-Image-Fun-House-2.0

2007-07-10 21:15:34.573 Core Image Fun House1061 CFLog 0: CFPropertyListCreateFromXMLData: plist parse failed; the data is notproper UTF-8. The file name for this data could be:...

White House Creates Cyber Governance Unit Within OMB

With the framework explained for a number of government cybersecurity-related initiatives, now it’s time to talk money. The White House anted up strong in 2015 with proposals for a new data breach notification standard, as well as plans to facilitate information-sharing between the public and...

MalDrone — First Ever Backdoor Malware for Drones

The use of small Unmanned Aerial Vehicles UAVs called Drones is rapidly transforming the way we go to war. Drones were once used for land surveillance, Delivering Pizza's, then equipped with bombs that changed the way nations conduct war and last year, these hovering drones were also used to hack...