US House Votes to End NSA Phone Records Collection

The U.S. House of Representatives’ resounding vote on Wednesday to end the National Security Agency’s collection of phone metadata and business records shifts the Senate focus squarely onto the shoulders of Kentucky Republican Senator, Mitch McConnell. McConnell is a staunch defender of the...

WordPress Artificial Intelligence Theme <= 1.2.3 - Cross Site Scripting

This WordPress theme is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the theme...

Artificial Intelligence Theme <= 1.2.3 - DOM Cross-Site Scripting (XSS)

The artificial-intelligence WordPress theme was affected by a DOM Cross-Site Scripting XSS security vulnerability...

Court's Ruling a 'Clear Signal' About Mass Surveillance Programs, Experts Say

The ruling last week by the Second Circuit Court of Appeals that the NSA’s years-long bulk collection of phone metadata is illegal is a “clear signal” that courts are moving in the direction of striking down some mass surveillance programs, experts say. The decision, issued Thursday, is among the...

Oracle Business Intelligence Mobile HD for iOS mimeAttachmentHeaderName Cross-Site Scripting Vulnerability

Oracle Business Intelligence Suite Enterprise Plus is a comprehensive suite of enterprise BI products that provide a full range of BI capabilities, including interactive dashboards, fully on-the-fly proactive intelligence and alerting solutions.Oracle Business Intelligence Mobile HD for iOS is...

Appeals Court Rules NSA Metadata Collection Not Authorized by Section 215

The United States Court of Appeals for the Second Circuit ruled Thursday that the Patriot Act does not authorize the bulk collection of phone records by the NSA. The ruling undermines the key foundation upon which the federal government’s phone metadata surveillance program is built, Section 215 ...

Oracle Business Intelligence Mobile HD 11.x Script Insertion

Document Title: =============== Oracle Business Intelligence Mobile HD v11.x iOS - Persistent UI Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1361 Oracle Security ID: S0540289 Tracking ID: S0540289 Reporter ID: 1 2015Q1 Release Date:...

Unspecified cross-site scripting vulnerability in Nagios Business Process Intelligence (BPI) index.php

Nagios is an open source free network monitoring tool , can effectively monitor Windows, Linux and Unix host status , switches routers and other network settings , printers and so on. Nagios Business Process Intelligence index.php cross-site scripting vulnerability , allowing remote attackers to...

Oracle BI Mobile HD v11.x iOS - Persistent UI Vulnerability

Document Title: =============== Oracle BI Mobile HD v11.x iOS - Persistent UI Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1361 Oracle Security ID: S0540289 Tracking ID: S0540289 Reporter ID: 1 2015Q1 Release Date: ============= 2015-05-06...

Oracle BI Mobile HD v11.x iOS - Persistent UI Vulnerability

Document Title: =============== Oracle BI Mobile HD v11.x iOS - Persistent UI Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1361 Oracle Security ID: S0540289 Tracking ID: S0540289 Reporter ID: 1 2015Q1 Release Date: ============= 2015-05-06...

WordPress Business Intelligence SQL Injection

SQL Injection vulnerability in WordPress Business Intelligence plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Active Defense Can Give Pause to Threats

SAN FRANCISCO – Disrupting hackers on your own network has become sort of a parlor trick for enterprises with enough resources and desire to dive into those waters. Today at RSA Conference, one expert explained how most organizations can leverage networking tools they’ve already invested in to pu...

RSA Conference Panel on Threat Information Sharing Bill

SAN FRANCISCO – The House of Representatives is considering a pair of information sharing bills this week. Also up for consideration is a data breach notification bill that is not likely to make it into law any time in the near future. According to a panel of experts at the RSA Conference, the...

Opoint Media Intelligence Open Redirect

Opoint Media Intelligence Unvalidated Redirects and Forwards URL Redirection Security Vulnerabilities Exploit Title: Opoint Media Intelligence click.php? &noblink parameter URL Redirection Security Vulnerabilities Vendor: Opoint Product: Opoint Media Intelligence Vulnerable Versions: Tested...

WordPress Business Intelligence Lite SQL Injection Vulnerability

WordPress Business Intelligence Lite is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Business Intelligence Plugin - SQL injection

This WordPress Business Intelligence plugin's "t" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin Business Intelligence - SQL Injection (Metasploit)

WordPress Plugin Business Intelligence - SQL Injection Metasploit Exploit Title : Wordpress Plugin 'Business Intelligence' Remote SQL Injection vulnerability Author : Jagriti Sahu AKA Incredible Vendor Link : https://www.wpbusinessintelligence.com Download Link :...

Wordpress Business Intelligence Plugin - SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Plugin 'Business Intelligence' Remote SQL Injection vulnerability Author : Jagriti Sahu AKA Incredible Vendor Link : https://www.wpbusinessintelligence.com Download Link :...

WordPress Plugin Business Intelligence - SQL Injection (Metasploit)

Exploit Title : Wordpress Plugin 'Business Intelligence' Remote SQL Injection vulnerability Author : Jagriti Sahu AKA Incredible Vendor Link : https://www.wpbusinessintelligence.com Download Link : https://downloads.wordpress.org/plugin/wp-business-intelligence-lite.1.6.1.zip Date : 1/04/2015...

WordPress Business Intelligence Lite Plugin <= 1.6.1 - SQL Injection

This plugin is prone to an SQL injection vulnerability, because data is not filtering in GET parameter ' t ', which in is file 'view.php'. Solution Update the plugin...