SAP AS JAVA DoS in BC-IAM-SSO-OTP package via QR Servlet

Application: SAP AS JAVA SSO Authentication Library Versions Affected: SAP AS JAVA SSO Authentication Library 2.0-3.0 Vendor URL: SAP Bugs: DoS Reported: 01.11.2016 Vendor response: 02.11.2016 Date of Public Advisory: 10.01.2017 Reference: SAP Security Note 2389042 Author: Vahagn Vardanyan ERPSca...

How To Use WhatsApp Web Client on iPhone and Other iOS Devices

WhatsApp Web client support is now available for iOS users. That's right, now iOS users can access their instant messaging facility on the web; without taking the other route via jailbreaking. Eight months ago, on January 21, 2015, WhatsApp was made available on web browsers, and let Android,...

Eisbär SCADA (All Versions) - Persistent UI Vulnerability

Document Title: =============== Eisbär SCADA All Versions - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1456 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Beware of Skimming Devices Installed on the ATM Vestibule Doors

Despite anti-skimmer ATM Lobby access control system available in the market, we have seen a number of incidents in recent years where criminals used card skimmers at ATM doors. Few years back, cyber criminals started using card skimmers on the door of the ATM vestibule, where customers have to...

Smart ATM offers Cardless Cash Withdrawal to Avoid Card Skimmers

Banks have tried every effort, from providing Magnetic Stripes based Credit and Debit Cards to Chip-and-Pin Cards, in order to secure its users from credit card cloning and card Skimmers. It has been known from years that Magnetic stripe are incredibly hackable, but Chip-n-Pin cards have also bee...

WhatsApp Web Client Now Available on Firefox and Opera Browsers

It's been a long time coming, but now the users of Firefox and Opera browsers don’t need to rely on the Chrome browser to access WhatsApp Web client, as the most popular smartphone messaging service has announced that the Web-based version of its service now works on Firefox and Opera web browser...

WhatsApp Web — New WhatsApp Feature Allows You to Chat From Your Browser

The most popular smartphone messaging service WhatsApp is now able to communicate with friends from their PC. No Rumours at all !! Enjoy WhatsApp from your desktop from now on. Last month, it was leaked that Whatsapp was working on a web client and finally from today they are introducing it to th...

openSUSE Security Update : pdns-recursor (openSUSE-SU-2014:1685-1)

This pdns-recursor version update fixes the following security issue and non secuirty issues. Update to upstream release 3.6.2. - boo906583: Degraded service through queries to queries to specific domains CVE-2014-8601 - Fixed broken localstatedir Update to upstream release 3.6.1. - gab14b4f:...

CVE-2014-8672

Cross-site scripting XSS vulnerability in the RewardingYourself application for Android and BlackBerry OS allows remote attackers to inject arbitrary web script or HTML via a crafted QR code...

Cross site scripting

Cross-site scripting XSS vulnerability in the RewardingYourself application for Android and BlackBerry OS allows remote attackers to inject arbitrary web script or HTML via a crafted QR code...

CVE-2014-8672

Cross-site scripting XSS vulnerability in the RewardingYourself application for Android and BlackBerry OS allows remote attackers to inject arbitrary web script or HTML via a crafted QR code...

CVE-2014-8672

CVE-2014-8672 affects the RewardingYourself application on Android and BlackBerry OS. The issue is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted QR code. The connected records do not specify affected versions, underlyi...

PT-2014-8678

Name of the Vulnerable Software and Affected Versions RewardingYourself application affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted QR code...

CVE-2014-8672: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the RewardingYourself application for Android and BlackBerry OS allows remote attackers to inject arbitrary web script or HTML via a crafted QR code...

Verizon to Bolster Authentication with QR Codes

If you want to know what the future holds for authentication on the web, it all depends whom you ask. Some say it’ll come in the form of biometrics – iris and fingerprint scans, etc. Others say the answer lies in a tangle of constantly changing two-factor verification codes users need to punch in...

CVE-2014-0239

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged response packet that triggers a...

CVE-2014-0239: Improper Input Validation

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged response packet that triggers a...

Ultrasonic Password Security for Google Accounts

Does a Strong Password Guarantee you the Security of your Online Account? If yes, then you should once check out our 'Data breaches' section on the website. A Startup Company, SlickLogin has developed a technology that enables you to login into online accounts using Ultrasonic sound, instead of...

OWASP Xenotix XSS Exploit Framework v5

OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting XSS vulnerability detection and exploitation framework. It provides Zero False Positive scan results with its unique Triple Browser Engine Trident, WebKit, and Gecko embedded scanner. It is claimed to have the world’s 2nd...

Paypal Account Deletion

Title: ====== PayPal Bug Bounty 110 - Auth Bypass Session Vulnerability Date: ===== 2013-08-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1056 PayPal Security UID: oebaLK VL-ID: ===== 1056 Common Vulnerability Scoring System: ==================================== 9....