vrin.fr XSS vulnerability

Vulnerable URL: http://www.vrin.fr/search.php?search=...

1 Million Computers Hacked for making big Money from Adsense

A group of cyber criminals has infected as much as 1 Million computers around the world over the past two years with a piece of malware that hijacks search results pages using a local proxy. Security researchers from Romania-based security firm Bitdefender revealed the presence of this massive...

Google Chrome Javascript Execution Vulnerability

Google Chrome is a popular web browser. A javascript execution vulnerability exists in Google Chrome's default search engine. An attacker is able to manipulate the masterpreferences file on the victim's machine...

Security update update for MozillaFirefox, mozilla-nss (important)

This update to Mozilla Firefox 46.0 fixes several security issues and bugs boo977333. The following vulnerabilities were fixed: - CVE-2016-2804: Miscellaneous memory safety hazards - MFSA 2016-39 boo977373 - CVE-2016-2806: Miscellaneous memory safety hazards - MFSA 2016-39 boo977375 -...

USN-2917-2: Firefox regressions

USN-2917-1 fixed vulnerabilities in Firefox. This update caused several regressions that could result in search engine settings being lost, the list of search providers appearing empty or the location bar breaking after typing an invalid URL. This update fixes the problem. We apologize for the...

Search Engine Subdomains Collector

This module can be used to gather subdomains about a domain from Yahoo, Bing. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Search Engine Subdomains Collector', 'Description' = %q This module...

New Relic: Unauthorized Access

Summary of Findings ------------------------------- The remote server https://download.newrelic.com allowed unauthenticated access to special access files that are only intended to be accessible after contacting the New Relic program managers as seen below. Exploiting the...

Employee Stole 'Yandex Search Engine' Source Code, Tried to Sell it for Just $29K

A former employee of Russian search engine Yandex allegedly stole the source code and key algorithms for its search engine site and then attempted to sell them on the black market to fund his own startup. Russian publication Kommersant reports that Dmitry Korobov downloaded a type of software...

search.moneta.co.kr XSS vulnerability

Vulnerable URL: http://search.moneta.co.kr/searchMember.jsp?nickname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Hacker-Friendly Search Engine that Lists Every Internet-Connected Device

Meet an all-new Hacker’s Search Engine similar to Shodan – Censys. At the end of last month, security researchers from SEC Consult found that the lazy manufacturers of home routers and Internet of Things IoT devices have been re-using the same set of hard-coded cryptographic keys, leaving around ...

CourseStorm CMS - Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Title : CMS CourseStorm - Cross Site Scripting Vulnerability Author : ZwX Vendor : http://www.coursestorm.com/ Security Level : Medium Tested Os : Windows 7 Description Vulnerability A vulnerability is located in the CourseStorm CMS search...

search.earthlink.net XSS vulnerability

Vulnerable URL: http://search.earthlink.net/search?area=earthlink-ws-bottomsearchbox=x=...

ZEDx 2.0 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Title : ZEDx 2.0 - Blind SQL Injection Vulnerability Author : ZwX Version : ZEDx 2.0 Demo Online : http://demo.zedx.org/ Vendor : http://www.zedx.org/ Date : 09/12/2014 ------------------------------- Description ------------------------------...

mealplannerpro.ca XSS vulnerability

Vulnerable URL:...

Disconnect.me 2.0 Local Root Exploit

Disconnect.me is the search engine entrusted by the Tor Browser. Unfortunately, the Mac OS X client has an LPE to root vulnerability 0day. Original Download = v2.0: https://disconnect.me/premium/mac Archived Download: http://d-h.st/LKqG Disconnect+Desktop.pkg: sha256 =...

Disconnect.me Mac OS X Client <= 2.0 - Local Privilege Escalation Vulnerability

Exploit for macOS platform in category local exploits Disconnect.me is the search engine entrusted by the Tor Browser. Unfortunately, the Mac OS X client has an LPE to root vulnerability 0day. Original Download = v2.0: https://disconnect.me/premium/mac Archived Download: http://d-h.st/LKqG...

USN-2702-3: Firefox regression

USN-2702-1 fixed vulnerabilities in Firefox. After upgrading, some users in the US reported that their default search engine switched to Yahoo. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Gary Kwong, Christian Holler, Byron Campen, Tyson Smith,...

noticiasdenavarra.com XSS vulnerability

Vulnerable URL: http://www.noticiasdenavarra.com/servicios/buscador?cx=002054642633582756380:3sdzoq6cawo=FORID:10=UTF-8=+b4rt"alert/XSSPOSED/...

Elasticsearch Arbitrary Code Execution Vulnerability

Elasticsearch is a set of open source distributed RESTful search engine built on Lucene , it is mainly used in cloud computing , and supports data indexing via HTTP using JSON . A security vulnerability exists in Elasticsearch that allows a remote attacker to submit a special request to execute...

Microsoft Classifies Ask Toolbar as 'Unwanted' Software

Microsoft has reclassified the Ask Toolbar as unwanted software, which means its security tools will automatically detect and remove all versions, except for the most recent, from Windows computers. Ask Toolbar is an interface to the 20-year-old Ask.com search engine, and it’s included in among...