CVE-2019-13050

Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service...

UBUNTU-CVE-2019-13050

Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service...

CVE-2019-13050

Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service...

PT-2019-2966

Name of the Vulnerable Software and Affected Versions SKS keyserver network versions through 1.2.0 GnuPG versions through 2.2.16 Description The issue is related to the interaction between the SKS keyserver code and GnuPG, which makes it risky to have a GnuPG keyserver configuration line referrin...

CVE-2019-13050: Improper Certificate Validation

Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service...

Hiding in Plain Sight

This blog was written by Jon Munshaw and Jaeson Schultz. Cisco Talos is continually working to ensure that our threat intelligence not only accounts for the latest threats but also new versions of old threats, such as spam. This often means pursuing cybercriminals wherever they congregate. Howeve...

8 million users installed 9 adware apps from Play Store

By Uzair Amir This is the second time in one week that adware apps have been found on Google Play Store. Lukas Stefanko, an IT security researcher at ESET has discovered 9 Android apps on Google Play Store spamming users with unwanted ads. One of the apps called "Remote control for TV and home...

Rapidly Growing Router Botnet Takes Advantage of 5-Year-Old Flaw

A fresh botnet is spreading across the landscape, targeting router equipment. So far, hundreds of thousands of bot endpoints have already been identified, and they’re apparently being marshaled to send out massive amounts of spam. The botnet first emerged in September, according to 360Netlab...

Russian Cybercriminal Pleads Guilty to Operating Kelihos Botnet

By Uzair Amir A Russian national namely Peter Yuryeich Levashov has pleaded guilty to operating the Kelihos botnet, which was used to launch a huge spamming and credential stealing campaign across the globe. Levashov, a 38-year old resident of St. Petersburg, Russia, was presented before a...

Zacinlo malware spams Windows 10 PCs with ads and takes screenshots

By Waqas The IT security researchers at Bitdefender have discovered a sophisticated This is a post from HackRead.com Read the original post: Zacinlo malware spams Windows 10 PCs with ads and takes screenshots...

CVE-2018-1081

A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was...

PT-2018-10119

Name of the Vulnerable Software and Affected Versions Moodle versions 3.1 through 3.1.10 Moodle versions 3.2 through 3.2.7 Moodle versions 3.3 through 3.3.4 Moodle versions 3.4 through 3.4.1 Description A flaw was found that allows unauthenticated users to trigger custom messages to admins via th...

Tor: Content spoofing on

Vulnerability description not provided...

Weblate: No rate limit or captcha to identify humans

Affected URL: https://hosted.weblate.org/hosting/ Issue: There is no captcha or rate limit to protect from bots against adding request for new project hosting. Which makes it easy for an attacker to perform spamming. Shall you need any more info notify me,...

Mixmax: mailbomb through invite feature on chrome addon

We didn't rate-limit our API to invite users to Mixmax, leading to potential spamming...

Weblate: Captcha Bypass at Email Reset can lead to Spamming users.

Because of 223525 you've implemented captcha on Reset Email functionality. But it can be bypassed and any attacker can flood/spam victim with reset emails in his Email Inbox...

ownCloud: password reset email spamming

Description: The email API https://yoursite/index.php/login?user=admin to reset password is unlimited and can be used as a email bomb vuln address:https://yoursite/index.php/lostpassword/email Reproduce steps:use demo.owncloud.org as example 1.https://demo.owncloud.org/index.php/login has a defau...

Weblate: Abuse of Api that causes spamming users and possible DOS due to missing rate limit

Summary: In your sub-domain: http://demo.weblate.org , another endpoint doesn't have any rate limit on it to prevent spamming you by posting a lot of questions. Description: Spamming and Possible DOS is being possible due to missing rate limit on this endpoint. Request POST /accounts/email/...

Weblate: Abuse of Api that causes spamming users and possible DOS due to missing rate limit on contact form

Summary: In your sub-domain: https://demo.weblate.org/ , there's an endpoint that doesn't have any rate limit on it to prevent spamming you by filling the contact you form multiple times to bomb you with tons of emails. Description: Spamming and Possible DOS is being possible due to missing rate...

Weblate: Spamming any user from Reset Password Function

It is possible to spam any user whose email-id is known. csrfmiddlewaretoken token can be used more than one. Users can be spammed heavily by just Brute force attack on password reset page. Implementtion: Implement a Captcha...