SQL injection attack as control user

PMASA-2016-42 Announcement-ID: PMASA-2016-42 Date: 2016-07-15 Summary SQL injection attack as control user Description A vulnerability was discovered in the user interface preference feature where a user can execute an SQL injection attack against the account of the control user. Severity We...

phpmyadmin -- Unsafe comparison of XSRF/CSRF token

The phpMyAdmin development team reports: The comparison of the XSRF/CSRF token parameter with the value saved in the session is vulnerable to timing attacks. Moreover, the comparison could be bypassed if the XSRF/CSRF token matches a particular pattern. We consider this vulnerability to be seriou...

Unsafe comparison of XSRF/CSRF token.

PMASA-2016-5 Announcement-ID: PMASA-2016-5 Date: 2016-01-24 Summary Unsafe comparison of XSRF/CSRF token. Description The comparison of the XSRF/CSRF token parameter with the value saved in the session is vulnerable to timing attacks. Moreover, the comparison could be bypassed if the XSRF/CSRF...

KLA10506 Multiple vulnerabilities in Websense products

Multiple serious vulnerabilities have been found in Websense products. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, execute or inject arbitrary code, spoof user interface and read or write arbitrary files. Below is a complete lis...

KLA10503 Multiple vulnerabilities in IBM products

Multiple serious vulnerabilities have been found in IBM products. Below is a complete list of vulnerabilities 1. Improper WAR applications support in IBM Bluemix can be exploited remotely via unspecified vectors related to Java overlay feature; 2. Improper API access restrictions in IBM API...

Vimeo: Serious Vulnerability Found

Hello , I have found interesting vulnerability and i hope you will like it and fix it soon because it will really cause damage . I can hijack your email server because there is no protection not even consider spam . kindly check the POC video :...

Local file inclusion vulnerability.

PMASA-2014-14 Announcement-ID: PMASA-2014-14 Date: 2014-11-20 Summary Local file inclusion vulnerability. Description In the GIS editor feature, a parameter specifying the geometry type was not correcly validated, opening the door to a local file inclusion attack. Severity We consider this...

wodWebServer.NET 1.3.3 - Directory Traversal

No description provided by source. ------------------------------------------------------------------------ Software................wodWebServer.NET 1.3.3 Vulnerability...........Directory Traversal Threat Level............Serious 3/5...

Rumble 0.25.2232 Denial of Service Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................Rumble 0.25.2232 Vulnerability...........Denial Of Service Threat Level............Serious 3/5 Download................http://humbedooh.users.sourceforge.net/...

trend micro data loss prevention virtual appliance 5.5 - Directory Traversal

No description provided by source. Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5 Vulnerability: Directory Traversal Threat Level: Serious 5/5 Download: http://support.trendmicro.com.cn/TM- Product/Product/DLP/5.5/Manager/5.5GM/DLPVA- 5.5.1294-i386-DVD.iso Discovery Date:...

Serious Sam Engine 1.0.5 - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8936/info It has been reported that Serious Sam game engine is vulnerable to a remote denial of service vulnerability due to a failure to handle exceptional conditions. This issue occurs when the client sends a certain...

serva32 1.2.00 rc1 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------ Software................Serva32 1.2.00 RC1 Vulnerability...........Denial Of Service Threat Level............Serious 3/5 Download................http://www.vercot.com/serva/ Discovery...

Pirate Bay co-founder 'Anakata' suspected of hacking Danish police databases

The Pirate Bay co-founder Gottfrid Svartholm Warg a.k.a 'Anakata' is suspected of being involved in one of Denmark's biggest hack attacks. Gottfrid was arrested in Cambodia in September 2012 and has been extradited from Cambodia to Sweden last year, charged with hacking the IBM mainframe of Logic...

SPAM via Answer

I have received an email notification containing a link as an aswer one of my questions. It turns out that a spam. I went online check my question and saw that the answer is not on it. So I believe this is very serious issue as we all trust and gave some personal information to Atlassian. Please...

Lulzsec hacker Sabu's sentencing postponed again

Remember Hector Xavier Monsegur a.k.a Lulzsec hacker Sabu ? That undercover double agent working for the FBI. Once again Authorities abruptly postponed his sentencing due to his continued cooperation with the feds. All told, he faced a maximum time behind bars of 124 years associated with his...

UK's Serious Organised Crime Agency's website taken offline after DDoS attack

UK's Serious Organised Crime Agency's website taken offline after DDoS attack The Serious Organised Crime Agency's website was temporarily shut down today after a cyber attack.It was the victim of a scam known as distributed denial of service DDOS whereby an internet address is flooded with bogus...

Japan under Heavy Cyber Attack !

Japan under Heavy Cyber Attack ! In last two days several Cyber attacks breach corporate and National Security of Japan. First, Japanese parliament hit by cyber attack from China according to Report. A server located in China was used for the attack on the Japanese Lower House. This led to an...

Серьезная уязвимость во всех версиях FreeBSD

link: http://habrahabr.ru/blogs/infosecurity/129401/ Понятно что все уже вкурсе и вроде как боян уже, у меня как бы вопрос, сплоит есть уже?...

Multiple XSS.

PMASA-2011-14 Announcement-ID: PMASA-2011-14 Date: 2011-09-14 Summary Multiple XSS. Description Firstly, if a row contains javascript code, after inline editing this row and saving, the code is executed. Secondly, missing sanitization on the db, table and column names leads to XSS vulnerabilities...

Mobile APP Network Forum Hacked, 15000 user accounts leaked

Mobile APP Network Forum Hacked, 15000 user accounts leaked Mobile APP Network Forum is Hacked by "Why So Serious?" hacker. He also hacked VBTeam.info and EA Game - Battlefield Heroes some days before. He leaked over 15.000 accounts of the community Forum on Pastebin in two parts. Part 1 Part 2...