Solar Controls WATTConfig M Software

CVSS v3 7.8 ATTENTION: Low skill level to exploit. Vendor: Solar Controls Equipment: WATTConfig M Software Vulnerability: Uncontrolled Search Path Element AFFECTED PRODUCTS The following versions of Solar Controls’ WATTConfig M Software for Windows 2.5.10 for M SSR/MAX PLCs are affected: WATTConf...

prace.atlasfirem.info XSS vulnerability

Vulnerable URL: http://prace.atlasfirem.info/s/stat-5-ceska-republika-strana-5.html?s="...

CVE-2017-0199 Used as Zero Day to Distribute FINSPY Espionage Malware and LATENTBOT Cyber Crime Malware

FireEye recently identified a vulnerability – CVE-2017-0199 – that allows a malicious actor to download and execute a Visual Basic script containing PowerShell commands when a user opens a Microsoft Office RTF document containing an embedded exploit. We worked with Microsoft and published the...

ceskosaske-svycarsko.cz XSS vulnerability

Open Bug Bounty ID: OBB-218004 Description| Value ---|--- Affected Website:| ceskosaske-svycarsko.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security advisory YSA-2017-01 | Yubico

Description not found...

Locky Ransomware Distributed Via DOCM Attachments in Latest Email Campaigns

Throughout August, FireEye Labs has observed a few massive email campaigns distributing Locky ransomware. The campaigns have affected various industries, with the healthcare industry being hit the hardest based on our telemetry, as seen in Figure 1. Figure 1. Top 10 affected industries Numerous...

Locky Ransomware Distributed Via DOCM Attachments in Latest Email Campaigns

Throughout August, FireEye Labs has observed a few massive email campaigns distributing Locky ransomware. The campaigns have affected various industries, with the healthcare industry being hit the hardest based on our telemetry, as seen in Figure 1. Figure 1. Top 10 affected industries Numerous...

Insider Breach: T-Mobile Czech Employee Steals and Sells 1.5 Million Users Data

T-Mobile is the latest in the list of recent high-profile data breaches, though this time the breach is not carried out by "Peace" - the Russian hacker who was behind the massive breaches in some popular social media sites including LinkedIn, MySpace, Tumblr, and VK.com. Instead, one of the...

google.cz XSS vulnerability

Vulnerable URL: https://www.google.cz/url?q=https://myaccount.google.com/signin?continue=https://goo.gl/bFrRLW Details: Description| Value ---|--- Patched:| Yes, at 04.09.2016 Latest check for patch:| 04.09.2016 23:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

News Republic – Breaking news - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application News Republic – Breaking news published at the 'play' market has multiple vulnerabilities...

Podcast Republic - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Podcast Republic published at the 'play' market has multiple vulnerabilities...

The Old Republic™ Security Key - External URLs, Suspicious files, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application The Old Republic™ Security Key published at the 'play' market has multiple vulnerabilities...

mitchellrepublic.com XSS vulnerability

Vulnerable URL: http://www.mitchellrepublic.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:24 GMT Vulnerability type:| XSS Vulnerability...

czech-republic.adhoards.com XSS vulnerability

Vulnerable URL: http://czech-republic.adhoards.com/all/search/?filterbyprice=order=1bycategory=bykeywords=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2015 Latest check for patch:| 23.11.2015 20:24 GMT Vulnerability type:| XSS...

Privatoria — Best VPN Service for Fast, Anonymous and Secure Browsing

PRIVACY – a bit of an Internet buzzword nowadays. Why? Because the business model of the Internet has now become data collection. If you trust Google, Facebook or other Internet giants to be responsible managers of your data, the ongoing Edward Snowden revelations are making it all clear that thi...

Sheep Marketplace Owner Arrested While Trying to Buy Luxury Home

Thomas Jiřikovský, an alleged Owner of one of the most popular Darknet website ‘Sheep Marketplace,’ has been arrested after laundering around $40 Million, making it one of the biggest exit scams in Darknet history. After the arrest of Silk Road owner 'Ross Ulbricht' in 2013 -- Sheep Marketplace...

Bitcash.cz Bitcoin Exchange hacked; Money from 4000 Bitcoin wallets Stolen

Another Bitcoin Exchange hacked! Bitcash. CZ based out of the Czech Republic has been hacked and Money from 4000 Bitcoin wallets have been Stolen, value of over 2 million Czech Koruna i.e. Approx $100,000. Bitcash.cz is currently down with a maintenance message that on the evening of November 11,...

Defy republic init_runit

A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/initrunit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object. Stack-based buffer overflow in the...

South Korea Blames North Korea for March Cyberattack

Officials from the Republic of Korea are saying North Korea’s military intelligence agency was responsible for the mid-March malware attacks that knocked several prominent South Korean banks and broadcasters offline, according to a Dow Jones Newswire report. The South Korean Science Ministry...

We Are Being Held in Cyber Handcuffs

Hello my Princes of Peace, Warriors of the Revolution, Princesses of the cause, I want you to take two minutes and watch this video: This video is the epitome of the ignorance and arrogance of governments all over the world in response to our cyber war revolution. As you will see, the power peopl...