The Intel processor is now a security vulnerability: it can be used by hackers as a backdoor-a vulnerability warning-the black bar safety net

Recently, in Moscow security research Positive Technologies report notes that the Intel Management Engine 11 There is the death of button, can be used by hackers to steal. Management Engine Management Engine is Intel a Firmware Interface for processors and peripheral chip for communication, therm...

nzbs4.me XSS vulnerability

Open Bug Bounty ID: OBB-271354 Description| Value ---|--- Affected Website:| nzbs4.me Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Petya-esque ransomware is spreading across the world

UPDATE 6/29/2017 1045 PST: According to information uncovered within Malwarebytes Labs, we have determined that this ransomware variant is coded to erase a unique and randomly generated key that is used to encrypt the MFT Master File Table. The destruction of the Salsa20 key makes it very unlikel...

arworld.us XSS vulnerability

Vulnerable URL: https://www.arworld.us/html/call-me.asp?interest=1/-///'/"//--...

ClipBucket Cross-Site Scripting Vulnerability (CNVD-2017-05016)

ClipBucket is an open source video sharing software. The software allows you to share videos to video sites and supports the light off effect when watching a movie. A cross-site scripting vulnerability exists in ClipBucket version 2.8.1. A remote attacker can exploit this vulnerability by injecti...

SA142 : Invalid TCP Packet Generation DoS in SSL Visibility

SUMMARY The SSL Visibility appliance may, under certain circumstances, generate invalid TCP reset RST packets to remote SSL servers when terminating an intercepted SSL connection. Some SSL servers may ignore the invalid RST packet received and keep the TCP connection open. A malicious SSL client,...

Follow Me (Requires Instagram) - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Follow Me Requires Instagram published at the 'play' market has multiple vulnerabilities...

Windows Gather DynaZIP Saved Password Extraction

This module extracts clear text credentials from dynazip.log. The log file contains passwords used to encrypt compressed zip files in Microsoft Plus! 98 and Windows Me. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

Mercedes me - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Mercedes me published at the 'play' market has multiple vulnerabilities...

Text Me - Free Texting & Calls - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Text Me - Free Texting & Calls published at the 'play' market has multiple vulnerabilities...

Stop Call Me - Call Blocker - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stop Call Me - Call Blocker published at the 'play' market has multiple vulnerabilities...

emaarme.com.sa XSS vulnerability

Vulnerable URL: http://www.emaarme.com.sa/english/news1.php?id=40-local'" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2481815 VIP website status:| No...

bossmp3.me XSS vulnerability

Open Bug Bounty ID: OBB-199043 Description| Value ---|--- Affected Website:| bossmp3.me Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Copy Me Plugin <= 1.0.0 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

WordPress Copy Me Plugin <= 1.0.0 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

WordPress Copy-Me 1.0.0 Cross Site Request Forgery

Details ================ Software: copy-me Version: 1.0.0 Homepage: http://wordpress.org/plugins/copy-me/ Advisory report: https://security.dxw.com/advisories/copy-me-vulnerable-to-csrf-allowing-unauthenticated-attacker-to-copy-posts/ CVE: Awaiting assignment CVSS: 4.3 Medium;...

ft86.me XSS vulnerability

Vulnerable URL: http://ft86.me/86pic.php?name=1322804491-1.jpg" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4369244 VIP website status:| No Check ft86.me SSL connection:| Grade:...

shiro: Security constraint bypass

It was found that Apache Shiro uses a default cipher key for its "remember me" feature. An attacker could use this to devise a malicious request parameter and gain access to unauthorized content...

shiro: Security constraint bypass

It was found that Apache Shiro uses a default cipher key for its "remember me" feature. An attacker could use this to devise a malicious request parameter and gain access to unauthorized content...

Important: Red Hat Security Advisory: Red Hat JBoss A-MQ 6.3 security update

Red Hat JBoss A-MQ 6.3, which fixes multiple security issues and includes several bug fixes and enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...