840 matches found
May 28, 2019âKB4499147 (OS Build 16299.1182)
None None...
UBUNTU-CVE-2015-9284
The request phase of the OmniAuth Ruby gem 1.9.1 and earlier is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able ...
March 19, 2019âKB4489890 (OS Build 16299.1059)
None None...
March 19, 2019âKB4489894 (OS Build 17134.677)
None None...
PayPal: Stored XSS on https://paypal.com/signin via cache poisoning
Due to a configuration in frontend, caching servers, it was possible for a researcher to use request smuggling to convert a page request into a cached redirect. If the cached redirect were accessed by a legitimate user, an attacker's content would be rendered instead of the requested page. While...
Cross Site Request Forgery (CSRF)
github.com/gogs/gog is vulnerable to cross-site request forgery CSRF attack. The library does not properly validate the token for user sign-in process, allowing a malicious user to launch a cross-site request forgery attack...
xcomwifi.net XSS vulnerability
Open Bug Bounty ID: OBB-701844 Description| Value ---|--- Affected Website:| xcomwifi.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
November 13, 2018âKB4467708 (OS Build 17763.134)
None None...
Google logins: JavaScript now required
Google users: In news that may sound alarming, it is now a requirement for you to enable JavaScript. Why? When your username and password are entered on Googleâs sign-in page, Google runs a risk assessment and only allows the sign-in if nothing looks suspicious. Recently, Google went about...
Virtual Apps | Error "We can't sign in to your account"
...
Ignite 2018 highlights: password-less sign-in, confidential computing, new threat protection, and more
What a week it was in Orlando! Ignite is always a biggie, and this one was no exception. For all of us here at Microsoft who get to work on security, spending time with customers to learn how you are using our security products today and to share new innovations to come is a highlight. At this...
Google Vows Privacy Changes in Chrome Browser After User Backlash
Google took steps to quiet critics Wednesday after irking them earlier this week when data privacy issues tied to Chrome 69 came to light. On Sunday, Matthew Green, a cryptographer and professor at Johns Hopkins University, blasted Google for what he said were questionable privacy policies in...
Googleâs Forced Sign-in to Chrome Raises Privacy Red Flags
An update to Google Chromeâs sign-in mechanism could clear a path to compromising the privacy of usersâ browser data, according to a researcher who stumbled across the change. Matthew Green, a cryptographer and professor at Johns Hopkins University, noticed his Gmail profile pic strangely and...
Trillian 6.1 Build 16 Denial Of Service
Exploit Title: Trillian 6.1 Build 16 - "Sign In" Denial of service PoC Discovery by: Jose Miguel Gonzalez Discovery Date; 2018-08-29 Vendor Homepage: https://www.trillian.im/ Software Link: https://www.trillian.im/download/ Tested Version: 6.1 Build 16 Tested on OS: Windows 10 Single Language x64...
Trillian 6.1 Build 16 - Sign In Denial of service (PoC)
Trillian 6.1 Build 16 - Sign In Denial of service PoC Exploit Title: Trillian 6.1 Build 16 - "Sign In" Denial of service PoC Discovery by: Jose Miguel Gonzalez Discovery Date; 2018-08-29 Vendor Homepage: https://www.trillian.im/ Software Link: https://www.trillian.im/download/ Tested Version: 6.1...
August 14, 2018âKB4343897 (OS Build 16299.611)
None None...
Microsoft Windows: Turn on convenience PIN sign-in
This policy setting allows you to control whether a domain user can sign in using a convenience PIN. If you enable this policy setting, a domain user can set up and sign in with a convenience PIN. If you disable or don SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be...
Microsoft Windows: Disallow copying of user input methods to the system account for sign-in
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winuserinputmethodssignin.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Disallow copying of user input methods to the system account for sign-in Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks...
Microsoft Windows: Block user from showing account details on sign-in
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnotshowingaccdetails.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Block user from showing account details on sign-in Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...
Microsoft Windows: Sign-in last interactive user automatically
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsigninlastuser.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Sign-in last interactive user automatically after a system-initiated restart Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...