1118 matches found
APPLE-SA-2014-10-20-1 iOS 8.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-10-20-1 iOS 8.1 iOS 8.1 is now available and addresses the following: Bluetooth Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A malicious Bluetooth input device may bypass pairing...
CVE-2014-4448
House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information from a Documents directory by obtaining this UID...
CVE-2014-4448
House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information from a Documents directory by obtaining this UID...
White House: Internet Not Borderless, but Lacking Interior
WASHINGTON D.C. – In an afternoon keynote address at the Billington Cybersecurity Summit yesterday, Michael Daniel, a special assistant to the president and White House Cybersecurity Coordinator, refuted the common sentiment that the Internet is difficult to defend because it is borderless. To th...
CVE-2014-5790
The CVE-2014-5790 entry documents a vulnerability in the Android application “Pets Fun House” (package mominis.Generic_Android.Pets_Fun_House), version 1.0.1, where X.509 certificates are not verified when establishing SSL connections. This insecure TLS handling enables man-in-the-middle attacker...
Active Auction House Sendpassword.ASP Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13038/info Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...
House Style 0.1.2 - readfile() Local File Disclosure Vulnerability
No description provided by source. Exploit Title: House Style 0.1.2 = readfile Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://sourceforge.net/projects/housestyle/ Version: 1.03 Category:: readfile Local File Disclosure Vulnerability2 Tested on: ...
Active Auction House 3.6 - Blind SQL Injection Vulnerability
No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: wishlist.asp catid Blind SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Auction House v 3.6 author: R3d-D3v!L Date: 17.dec.2009 T!ME: 10:...
Capexweb 1.1 - SQL Injection Vulnerability
No description provided by source. Exploit Title: Capexweb Sql Vulnerable Date: 15 Dec 2011 Author: D1rt3 Dud3 Google Dork: inurl:capexweb Gr33ts: Th3 RDX Version: 1.1 Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc...
Active Auction House start.asp ReturnURL Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13036/info Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...
Active Auction House WatchThisItem.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13039/info Active Auction House is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this iss...
Active Auction House ItemInfo.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13034/info Active Auction House is reportedly affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in a SQL query. Successfu...
Active Auction House Default.ASP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13032/info Active Auction House is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL querie...
Active Bids search.asp search Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/33306/info Active Auction House and Active Auction Pro are prone to SQL-injection and cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied data. Exploiting these issues could allow...
House Amendment Limits Funding for NSA Surveillance
The House of Representatives last night overwhelmingly passed an amendment to the Department of Defense Appropriations Act that would cut funding for two programs that grant intelligence agencies access to the private data and communications of U.S. citizens. The amendment shows that Congress is...
Facebook Set to Let Users Edit Own Advertising Info
Facebook announced today it will soon be rolling out a new feature to give users more control when it comes to the types of advertisements they see on the site. If users are tired of getting barraged with ads for shoes, video games or discount plane tickets, they’ll not only be able to stop the...
House Initiates NIST-NSA Separation on Crypto Standards
Eight months after an explosive revelation that encryption standards developed and evaluated by the National Security Agency were allegedly subverted by the intelligence outfit, a House committee has moved to sever the NSA’s involvement in the standards process. An amendment to the Frontiers in...
18-Year-Old Student Arrested for Hacking School Computers to Change Grades
An 18-year old Miami University student is facing charges for allegedly breaching the school's computer system to change grades for himself and four other students. Jose Bautista appeared before a judge Friday after he was arrested Thursday by the Miami School Board Police after the principal of...
The White House and Zero Day Sleight of Hand
The White House wants you to know that it did not know about the OpenSSL Heartbleed vulnerability before you did. The White House also wants you to know that administration officials don’t think stockpiling zero days isn’t necessarily good for national security. That’s all well and good, except...
White House Proposal Would End NSA Metadata Program
Privacy advocates are cautiously applauding the reports that the Obama administration will unveil a legislative proposal to end the National Security Agency’s collection of Americans’ bulk phone records, but are concerned what the fine print on that proposal might hold. “Given all the various way...