282 matches found
Multiple script injection vulnerabilities in multiple Yamaha network devices
Overview The management screen of multiple network devices provided by Yamaha Corporation contains multiple script injection vulnerabilities CWE-74. The following researchers reported the vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
Crashing Mobile Apps Capture Screens, Leak Private Data
Several mobile software developer kits SDKs can capture sensitive user data when a mobile app crashes, exposing private data to an outside third party. Researchers at Appthority singled out SDKs offered by AppSee and TestFairy in a report published Monday. They warned that mobile users whose apps...
Side-Channel Attack Allows Remote Listener to ‘Hear’ On-Screen Images
A stealthy side-channel tactic for digital surveillance has been uncovered, which allows an attacker to “hear” on-screen images. According to a team of academic researchers from Columbia University, the University of Michigan, University of Pennsylvania and Tel Aviv University, inaudible acoustic...
phantom-fly-screens.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-634831 Description| Value ---|--- Affected Website:| phantom-fly-screens.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Code Execution Vulnerabilities in Multiple Crestron Products
Crestron TSW-1060 and others are touch screen devices from Crestron Electronics, USA. A security vulnerability exists in several Crestron products. The vulnerability can be exploited by remote attackers to execute code with the help of the Bash shell service in the Crestron Toolbox Protocol CTP...
Code Execution Vulnerabilities in Multiple Crestron Products
Crestron TSW-1060 and others are touch screen devices from Crestron Electronics, USA. A security vulnerability exists in multiple Crestron products. A remote attacker can exploit the vulnerability to execute code via an injection command...
Tips for safe summer travels: your cybersecurity checklist
Summer is just around the corner in the Northern Hemisphere, and with it comes vacation plans for many. Those looking to take some time away from work and home are likely making plans to secure their home, have their pets taken care of, and tie up loose ends at work. But how about securing your...
Hackers deface Airport screens in Iran with anti-government messages
By Waqas On Thursday 24th May, the airport screens at Mashhad city in northeast This is a post from HackRead.com Read the original post: Hackers deface Airport screens in Iran with anti-government messages...
CVE-2018-5280
SonicWall SonicOS on Network Security Appliance NSA 2016 Q4 devices has XSS via the Configure SSO screens...
CVE-2018-5280
SonicWall SonicOS on Network Security Appliance NSA 2016 Q4 devices has XSS via the Configure SSO screens...
CVE-2018-5280: Improper Neutralization of Input During Web Page Generation
SonicWall SonicOS on Network Security Appliance NSA 2016 Q4 devices has XSS via the Configure SSO screens...
Taking HTTPS Denial to an Absurd Level
Sometimes fighting good security is harder than embracing it. That appears to be the case with at least one company that went to great lengths to avoid insecure HTTPS browser security warnings from appearing on the thousands of sites it managed. The company in question is ShopCity.com, a...
Unidesk - New desktops show black screens in VMware Horizon View
When connecting to a new desktop from the Horizon View client or a PCoIP Thin/ZeroClient, one or more monitors shows nothing but a black screen...
WordPress User and Term Editor Screens Open Redirect Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress user and term editor screens. Allowing remote attackers to explo...
desktop-screens.com XSS vulnerability
Vulnerable URL: http://www.desktop-screens.com/search/%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 442981 VIP website status:| ...
Password Masking
Slashdot asks if password masking -- replacing password characters with asterisks as you type them -- is on the way out. I don't know if that's true, but I would be happy to see it go. Shoulder surfing, the threat is defends against, is largely nonexistent. And it is becoming harder to type in...
Cisco Intrusion Prevention System Device Manager Information Disclosure Vulnerability
A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager IDM could allow an unauthenticated, remote attacker to view sensitive information stored in certain HTML comments. The vulnerability is due to improper masking of sensitive data in...
Insanity-Framework - Generate Payloads and control Remote Machines
With the dynamics of persuasion that prove effective in a pentest, several painstaking means of making a payload has emerged, Insanity Framework provides speed and effectiveness in a single tool to help you work. Features Bypass most AV and Sandboxes. Remote Control. Payload Generation. Some...