268 matches found
A banking trojan that steals Gmail, Facebook, Twitter and Yahoo Password
By Waqas The IT security researchers at Bitdefender have discovered a banking malware This is a post from HackRead.com Read the original post: A banking trojan that steals Gmail, Facebook, Twitter and Yahoo Password...
Google's Data on Login Thefts
This is interesting research and data: With Google accounts as a case-study, we teamed up with the University of California, Berkeley to better understand how hijackers attempt to take over accounts in the wild. From March 2016 to March 2017, we analyzed several black markets to see how hijackers...
Gratipay: Bypassing X-frame options
bypass X-Frame-Options Proxy protection NOT used DomainUsing: gratipay.com Proxy protection NOT used , i can bypass X-Frame-Options header and recreate clickjacking on the whole domain. I see that you don't have a reverse proxy protection this allows all users to proxy your website rather than...
CVE-2014-8675
CVE-2014-8675 affects Soplanning 1.32 and earlier. The issue arises from static ICAL calendar sharing links that embed login information, enabling an attacker to brute-force the embedded password hash and obtain a calendar owner’s password. Connected sources corroborate that SOPlanning
Critical RCE Flaw Found in OpenVPN that Escaped Two Recent Security Audits
A security researcher has found four vulnerabilities, including a critical remote code execution bug, in OpenVPN, those were not even caught in the two big security audits of the open source VPN software this year. OpenVPN is one of the most popular and widely used open source VPN software...
Mixmax: Security Vulnerability - SMTP protection not used
Hi, I'm checking your website found SPF record there. You should apply strict SMPT policy to stop spoofed email sending from your domain. An attacker would send a Fake email from [email protected] saying that Please change your password, The victim is aware of phishing attacks, But when he sees...
CVE-2016-4890
ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...
PT-2017-17809
Name of the Vulnerable Software and Affected Versions Schneider Electric SoMachine Basic version 1.4 SP1 Schneider Electric Modicon TM221CE16R version 1.3.3.3 Description The issue concerns a hardcoded-key vulnerability in the Project Protection feature, which is used to prevent unauthorized acce...
LastPass Fixes Three Password Theft Vulnerabilities
Engineers at LastPass fixed three different vulnerabilities in the password manager over the last 24 hours, all discovered by Google Project Zero researcher Tavis Ormandy, which could have allowed for the theft of passwords. One of the issues, a remote code execution vulnerability that could have...
New MacOS Malware linked to Russian Hackers Can Steal Passwords & iPhone Backups
Security researchers have discovered a new Mac malware allegedly developed by APT28 Russian cyber espionage group who is believed to be responsible for 2016 presidential election hacking scandal. A new variant of the X-Agent spyware is now targeting Apple macOS system that has previously been use...
TP-Link Archer CR-700 - Cross-Site Scripting
TP-Link Archer CR-700 - Cross-Site Scripting Exploit Title: TP-Link Archer CR-700 XSS vulnerability Google Dork: N/A Date: 09/07/2016 Exploit Author: Ayushman Dutta Vendor Homepage: http://www.tp-link.us/ Software Link: N/A Version: 1.0.6 REQUIRED Tested on: Linux CVE : N/A Exploit Information:...
Cross-Site Request Forgery Vulnerability in BT Wi-Fi
BT Wi-Fi is an application that provides a wireless internet connection. A cross-site request forgery vulnerability exists in BT Wi-Fi. An attacker exploiting the vulnerability could steal a user's wireless network password, posing a risk of information leakage...
LastPass has multiple vulnerabilities
LastPass LastPass Password Manager is a free cross-platform online password management tool from LastPass, Inc. in the United States. The tool can be integrated with browsers and provides them with password management, autofill forms and other features, support for random password generation,...
Apple's operating system exposed new vulnerabilities in addition to the latest version without immune-vulnerability warning-the black bar safety net
Security researchers recently discovered that Appleoperating systemthere is a huge security vulnerability. Hackers only need to know your phone number, you can use this security vulnerability to steal the user's password. ! IDG according to foreign media reports, security researchers recently...
Mail.ru: Back Refresh Attack after registration and successful logout
About the vulnerability: The back, forward and refresh buttons of the browser can be used to steal the password of a previous user. In this article we examine the vulnerability and look at ways to solve them.A web browser has the functionality to store the recent pages browsed by the user in its...
FreeBSD : shotwell -- not verifying certificates (448047e9-030e-4ce4-910b-f21a3ad5d9a0)
Michael Catanzaro reports : Shotwell has a serious security issue 'Shotwell does not verify TLS certificates'. Upstream is no longer active and I do not expect any further upstream releases unless someone from the community steps up to maintain it. What is the impact of the issue? If you ever use...
The Trend Micro Antivirus is exposed to serious vulnerability, hackers can steal all of your passwords-vulnerability warning-the black bar safety net
! Trend Micro anti-virus exposed a serious vulnerability Famous antivirus manufacturer and security firm Trend Micro released an emergency patch in order to fix its antivirus product in the presence of several severe vulnerabilities these vulnerabilities allow hackers to remotely execute arbitrar...
'Ridiculous' Bug in Popular Antivirus Allows Hackers to Steal all Your Passwords
If you have installed Trend Micro's Antivirus on your Windows computer, then Beware. Your computer can be remotely hijacked, or infected with any malware by even through a website – Thanks to a critical vulnerability in Trend Micro Security Software. The Popular antivirus maker and security firm...
shotwell -- not verifying certificates
Michael Catanzaro reports: Shotwell has a serious security issue "Shotwell does not verify TLS certificates". Upstream is no longer active and I do not expect any further upstream releases unless someone from the community steps up to maintain it. What is the impact of the issue? If you ever used...
