6152 matches found
The net exposure of the Bank to pay the loopholes in the suspected SMS CAPTCHA by hackers hijacking-vulnerability warning-the black bar safety net
Recently, the media exposed the Bank to pay the presence of vulnerabilities. The criminals forcibly opened the depositors of the Bank only with the SMS verification code to transactions of the“e payment”service, with illegally intercepting SMS verification code, easily removed the card money. !...
Threat Outbreak Alert RuleID16617: Email Messages Distributing Malicious Software on July 13, 2015
Medium Alert ID: 39895 First Published: 2015 July 13 17:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16617 may contain the following files: Name | Siz...
Two Dozen Zoos Potentially Hit by Data Breach
Anyone who’s visited one of two dozen zoos across America over the last several months may want to check their credit and debit card statements. A third party operator of concessions and retail services at zoos from Hawaii to Florida acknowledged this week that it was hit by a data breach earlier...
KesionIMalv2.5逻辑漏洞（DEMO演示）
简要描述： RT 详细说明： demo地址：http://imall.kesion.com 修改购物车内商品数量时，抓包修改为-1，提交订单后，点击支付，该订单直接支付成功。 ht...
Threat Outbreak Alert RuleID16528: Email Messages Distributing Malicious Software on July 8, 2015
Medium Alert ID: 39812 First Published: 2015 July 8 17:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16528 may contain the following files: Name | Size...
Hotels.com Phishing Scam Duping Travelers
An undisclosed number of travelers who use Hotels.com may have been victims of a phishing scheme. The company said some customers were recently tricked into disclosing their names, phone numbers, email addresses and travel bookings. An individual was reportedly able to convince customers that the...
Fraud Alert Issued on Business Email Compromise Scam
The Financial Services Information Sharing and Analysis Center FS-ISAC and federal law enforcement agencies have released a joint alert warning companies of a sophisticated wire payment scam referred to as business email compromise BEC. Scammers use fraudulent information to trick companies into...
FBI Says Cryptowall Cost Victims $18 Million Since 2014
In a little more than a year, consumers affected by the Cryptowall ransomware have reported to the FBI more than $18 million in losses related to infections from the malware. Cryptowall is among the group of ransomware families that encrypt the files on victims’ computers and then demands a ranso...
Threat Outbreak Alert RuleID16057: Email Messages Distributing Malicious Software on June 18, 2015
Medium Alert ID: 39415 First Published: 2015 June 18 20:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16057 may contain the following files: Name | Siz...
Threat Outbreak Alert RuleID4626: Email Messages Distributing Malicious Software on January 27, 2016
Medium Alert ID: 39317 First Published: 2015 June 11 17:35 GMT Last Updated: 2016 January 28 13:48 GMT Version: 63 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID4626KVR...
Cryptowall 3.0 Infections Spike from Angler EK, Malicious Spam
Since the Angler Exploit Kit began in late May spreading Cryptowall 3.0 ransomware, traffic containing the malware has continued to grow, putting more potential victims in harm’s way. Today, the SANS Internet Storm Center reported that Cryptowall 3.0 infections are emanating from not only the...
Threat Outbreak Alert RuleID15857: Email Messages Distributing Malicious Software on June 10, 2015
Medium Alert ID: 39290 First Published: 2015 June 10 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15857 may contain the following files: Name | Siz...
Drupal Novalnet Payment - Ubercart Module SQL Injection Vulnerability
Drupal is a free and open source content management system developed in PHP.Novalnet Payment is a payment module. A SQL injection vulnerability exists in the Drupal Novalnet Payment - Ubercart module due to the program failing to adequately filter user-supplied input. The vulnerability allows...
Drupal Novalnet Payment Module SQL Injection Vulnerability
Drupal is a free and open source content management system developed in PHP.Novalnet Payment is a payment module. Drupal Novalnet Payment has a SQL injection vulnerability due to the program failing to adequately filter user-supplied input. The vulnerability allows remote attackers to submit...
HackerOne: mailto: link injection on https://hackerone.com/directory
I just found that entering a non-existing porogram returns the following response: The Directory doesn't have a profile matching these criteria. If an organization has published security contact information or a vulnerability disclosure policy, please let us know. The bold part has a mailto: link...
Novalnet Payment Module Drupal Commerce - Critical - SQL Injection - Unsupported - SA-CONTRIB-2015-117
This module enables you add the Novalnet payment service provider to Drupal Commerce. The module fails to sanitize a database query by not using the database API properly, thereby leading to a SQL Injection vulnerability. Since the affected path is not protected against CSRF, a malicious user can...
Charter Communications Fixes Data Leaking Vulnerability
Internet-cable-television provider Charter Communications recently fixed an issue with its website that was inadvertently leaking the information of tens of thousands of customers. Customers’ payment details, modem serial numbers, device names, account numbers, home addresses, were being spilled...
Simple Invoice 2011 Cross Site Scripting
Affected software: simple invoice Type of vulnerability:stored xss URL:simpleinvoices.org Discovered by: provensec Website: provensec.com version:2011 Proof of concept goto http://demo.simpleinvoices.org/index.php?module=paymenttypes&view=manage add new or edit some older payment type and fill th...
Evolving Financial Services Security Requirements: Part 1
Through the end of the year, the New York State Department of Financial Services NYSDFS, or DFS for short, expects to proceed with a number of initiatives to help strengthen cybersecurity at its regulated companies. Among these changes will be integration of regular, targeted assessments of...
