Why Is Your Location Data No Longer Private?

The past month has seen one blockbuster revelation after another about how our mobile phone and broadband providers have been leaking highly sensitive customer information, including real-time location data and customer account details. In the wake of these consumer privacy debacles, many are lef...

volunteer.nelson-atkins.org XSS vulnerability

Vulnerable URL: http://volunteer.nelson-atkins.org/index.cfm?ErrorMsg=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Latest Windows UAC Bypass Permits Code Execution

Less than a month after disclosing a Windows User Account Control bypass, researcher Matt Nelson today published another attack that circumvents the security feature and leaves no traces on the hard disk. This time, the bypass relies on Event Viewer eventvwr.exe, a native Windows feature used to...

VMSA-2016-0011:vRealize Log Insight update addresses directory traversal vulnerability

VMSA-2016-0011 vRealize Log Insight update addresses directory traversal vulnerability. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0011 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: vRealize Log Insight update addresses directory...

Moderate: Red Hat Security Advisory: Red Hat Enterprise Linux 5.8 kernel update

Updated kernel packages that fix one security issue, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 5. This is the eighth regular update. The Red Hat Security Response Team has rated...

Unbreakable Enterprise kernel security and bug fix update

2.6.32-300.3.1.el6uek - proc: fix oops on invalid /proc/ /maps access Linux Torvalds - Revert 'capabilities: do not grant full privs for setuid w/ file caps + no effective caps' Joe Jin - mm: Use MMFCOMPAT instead ia32compat to prevent kabi be broken Joe Jin - proc: enable writing to /proc/pid/me...

Facebook "Trusted friends" Security Feature Easily Exploitable

Facebook "Trusted friends" Security Feature Easily Exploitable Last week Facebook announced that in one day 600,000 accounts possibly get hacked. Another possible solution for Facebook to combat security issues is to find 3 to 5 "Trusted friends". Facebook will be adding two new security features...

Ubuntu Update for linux-ti-omap4 USN-1202-1

Ubuntu Update for Linux kernel vulnerabilities USN-1202-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12021.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-ti-omap4 USN-1202-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

Ubuntu Update for linux USN-1167-1

Ubuntu Update for Linux kernel vulnerabilities USN-1167-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11671.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1167-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Important: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Updated qemu-kvm packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

HTB22960: XSS in Daily Maui Photo Widget wordpress plugin

Vulnerability ID: HTB22960 Reference: http://www.htbridge.ch/advisory/xssindailymauiphotowidgetwordpressplugin.html Product: Daily Maui Photo Widget wordpress plugin Vendor: Kris Nelson http://www.webnelly.com/ Vulnerable Version: 0.2 Vendor Notification: 14 April 2011 Vulnerability Type: XSS Cro...

Daily Maui Photo Widget WordPress Plugin 0.2 Cross Site Scripting

Vulnerability ID: HTB22960 Reference: http://www.htbridge.ch/advisory/xssindailymauiphotowidgetwordpressplugin.html Product: Daily Maui Photo Widget wordpress plugin Vendor: Kris Nelson http://www.webnelly.com/ Vulnerable Version: 0.2 Vendor Notification: 14 April 2011 Vulnerability Type: XSS Cro...

Ubuntu Update for linux vulnerabilities USN-1105-1

Ubuntu Update for Linux kernel vulnerabilities USN-1105-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11051.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux vulnerabilities USN-1105-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Linux Kernel 2.6.37 (RedHat Ubuntu 10.04) - Full-Nelson.c Local Privilege Escalation

Linux Kernel 2.6.37 RedHat Ubuntu 10.04 - Full-Nelson.c Local Privilege Escalation / Linux Kernel = 2.6.37 local privilege escalation by Dan Rosenberg @djrbliss on twitter Usage: gcc full-nelson.c -o full-nelson ./full-nelson This exploit leverages three vulnerabilities to get root, all of which...

MMA Creative Design SQL Injection

========================================================= MMA Creative Design SQL Injection Vulnerability ========================================================= Name: MMA Creative Design SQL Injection Vulnerability Date: 2010-05-23 vendor: www.mmacreative.com Author: Ashiyane Digital Security...

MMA Creative Design SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== MMA Creative Design SQL Injection Vulnerability =============================================== Name: MMA Creative Design SQL Injection Vulnerability Date: 2010-05-23 vendor: www.mmacreative.com...