163 matches found
Open-Letters 1.0.5 /external_scripts/tinymce/plugins/ajaxfilemanager/ajax_create_folder.php 代码执行漏洞
No description provided by source...
Open-Letters Remote PHP Code Injection Vulnerability
Open-Letters is a DAS Direct Attached Storage communication system. Open-Letters suffers from a remote PHP code injection vulnerability. The vulnerability allows attackers to execute arbitrary code...
Open Letters Remote PHP Code Injection
/ errorreporting0; settimelimit0; iniset"defaultsockettimeout", 5; function httpsend$host, $packet if !$sock = fsockopen$host, 80 die "\n- No response from $host:80\n"; fwrite$sock, $packet; return streamgetcontents$sock; print "+ Author: TUNISIAN CYBER\n"; print "+ Script coded BY: Egidio Romano...
Open-Letters - Remote PHP Code Injection
Open-Letters - Remote PHP Code Injection / errorreporting0; settimelimit0; iniset"defaultsockettimeout", 5; function httpsend$host, $packet if !$sock = fsockopen$host, 80 die "\n- No response from $host:80\n"; fwrite$sock, $packet; return streamgetcontents$sock; print "+ Author: TUNISIAN CYBER\n"...
Open-Letters - Remote PHP Code Injection
/ errorreporting0; settimelimit0; iniset"defaultsockettimeout", 5; function httpsend$host, $packet if !$sock = fsockopen$host, 80 die "\n- No response from $host:80\n"; fwrite$sock, $packet; return streamgetcontents$sock; print "+ Author: TUNISIAN CYBER\n"; print "+ Script coded BY: Egidio Romano...
Snapchat Publishes First Transparency Report
Snapchat has released its first transparency report, covering a four-month period from November through February, and the data shows that the company didn’t receive any National Security Letters and got fewer than 400 total requests for data from the United States government. Snapchat, a Californ...
U.S. Government Requests for Yahoo User Data Drop
Yahoo received nearly 5,000 requests for user data from the United States government in the last six months of 2014 and disclosed some content in nearly 25 percent of those cases. The company said in its new transparency report that it received between 0-999 National Security Letters from the U.S...
Confusion Reigns Over FBI's Plans for National Security Letter Gag Orders
The way that National Security Letters are approved and used is one of the government’s more opaque processes. Now, you can add some more confusion into the mix, courtesy of some new comments from the FBI about when recipients are able to disclose the fact that they have received an NSL. More tha...
X2Engine < 4.2 Multiple Vulnerabilities
According to its version number, the X2Engine application installed on the remote web server is potentially affected by multiple vulnerabilities : - A PHP object injection vulnerability exists which can be used to carry out Server-Side Request Forgery SSRF attacks using specially crafted serializ...
Canary Watch Site Launches to Track Warrant Canaries
In the years since Edward Snowden began putting much of the NSA‘s business in the street, including its reliance on the secret FISA court and National security Letters, warrant canaries have emerged as a key method for ISPs, telecoms and other technology providers to let the public know whether...
Government Demands for Verizon Customer Data Drop
The number of subpoenas, total orders and warrants that the United States government delivered to Verizon all dropped in the second half of 2014, according to the company’s latest transparency report. The giant telecom provider released data on Thursday that showed a decrease in subpoenas of abou...
PT-2014-8992
Name of the Vulnerable Software and Affected Versions WP Limit Posts Automatically plugin version 0.7 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks...
[SECURITY] Fedora 20 Update: pwgen-2.07-1.fc20
pwgen generates random, meaningless but pronounceable passwords. These passwords contain either only lowercase letters, or upper and lower case, or upper case, lower case and numeric digits. Upper case letters and numeric digits are placed in a way that eases memorizing the password...
CVE-2014-7115
The Letters to God - soc. network aka com.wPismakBoguLetterstoGod application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7115
The Letters to God - soc. network aka com.wPismakBoguLetterstoGod application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7115
CVE-2014-7115 concerns the Android app “The Letters to God - soc. network” (package com.wPismakBoguLetterstoGod) version 0.1, where SSL certificate validation is not performed. This allows a man-in-the-middle to spoof servers and potentially access sensitive information via a crafted certificate....
PT-2014-7779
Name of the Vulnerable Software and Affected Versions The Letters to God - soc. network aka com.wPismakBoguLetterstoGod version 0.1 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive...
CVE-2014-7115: Undefined Security Weakness
The Letters to God - soc. network aka com.wPismakBoguLetterstoGod application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
National Security Letters Challenged in Ninth Circuit Court
In the Ninth Circuit Court in San Francisco Wednesday morning, the Electronic Frontier Foundation’s EFF Kurt Opsahl urged the federal appeals court to uphold a lower court’s ruling that national security letters NSLs are unconstitutional. Regardless whether the ruling is upheld, the matter of NSL...
Twitter Files Suit Over Government Restrictions on National Security Letter Data
Twitter has filed a lawsuit in federal court asking that the United States Department of Justice’s prohibitions on publishing the number and kind of government requests for data the company receives be declared unconstitutional. The suit claims that the rules infringe on Twitter’s right to free...