The vulnerability of the Qualcomm User Identity Module component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm User Identity Module component in the Android operating system arises from buffer overflows during the processing of responses from SIM cards. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility o...

shop.mohd.it XSS vulnerability

Open Bug Bounty ID: OBB-582638 Description| Value ---|--- Affected Website:| shop.mohd.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Will Subscribers Pay for Security?

Carriers see security as a vital component of their five-year strategies and expect to increase spending on security in 2018 according to the Telecoms.com Annual Industry Survey 2017. Is security a good business opportunity for Carriers? Turns out investment in security has a good payback based o...

WordPress Email Subscribers Newsletters Plugin Information Disclosure (CVE-2018-6015)

An Information Disclosure vulnerability exists in WordPress Email Subscribers & Newsletters plugin. Successful exploitation of this vulnerability would allow a remote attacker to the download the entire e-mail subscriber list from affected system...

CVE-2018-0116

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized as a subscriber without providing a valid password; however, the attacker must provide a valid username. The vulnerability is due to incorrect RADIUS user...

Design/Logic Flaw

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to determine whether a subscriber username is valid. The vulnerability occurs because the Cisco Policy Suite RADIUS server component returns different authentication failure...

CVE-2018-0116

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized as a subscriber without providing a valid password; however, the attacker must provide a valid username. The vulnerability is due to incorrect RADIUS user...

CVE-2018-0134

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to determine whether a subscriber username is valid. The vulnerability occurs because the Cisco Policy Suite RADIUS server component returns different authentication failure...

Cisco Policy Suite Authentication Bypass Vulnerability

Cisco Policy Suite CPS is a next-generation policy management solution from Cisco. The program provides user-based business rules, applications and real-time management of network resources and other functions. RADIUS authentication module is one of the RADIUS protocol authentication module. An...

Cisco Policy Suite RADIUS Authentication Information Disclosure Vulnerability

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to determine whether a subscriber username is valid. The vulnerability occurs because the Cisco Policy Suite RADIUS server component returns different authentication failure...

WordPress Plugin EmailSubscribers And Newsletters Information Disclosure Vulnerability

wordpress EmailSubscribers And Newsletters plugin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Email Subscribers & Newsletters < 3.4.8 - Unauthenticated Subscriber Download

The Email Subscribers & Newsletters – Simple and Effective Email Marketing WordPress Plugin WordPress plugin was affected by an Unauthenticated Subscriber Download security vulnerability. POST /?es=export ... option=viewallsubscribers...

WordPress Plugin Email Subscribers Newsletters 3.4.7 - Information Disclosure

WordPress Plugin Email Subscribers Newsletters 3.4.7 - Information Disclosure Exploit Title: WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure Google Dork: Date: 2018-01-23 Exploit Author: ThreatPress Security Vendor Homepage: http://icegram.com/ Software Link:...

WordPress Email Subscribers & Newsletters 3.4.7 Plugin - Information Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure Google Dork: Date: 2018-01-23 Exploit Author: ThreatPress Security Vendor Homepage: http://icegram.com/ Software Link:...

WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure

Exploit Title: WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure Google Dork: Date: 2018-01-23 Exploit Author: ThreatPress Security Vendor Homepage: http://icegram.com/ Software Link: https://wordpress.org/plugins/email-subscribers/ Version: 3.4.7 Tested on: WordPres...

CVE-2018-0006

The CVE-2018-0006 vulnerability affects Junos OS on devices configured for DHCPv4/v6 over AE auto-sensed VLANs in Broadband Edge deployments. The issue is a Denial of Service caused by a high rate of VLAN authentication requests triggering unbounded memory allocations in the bbe-smgd (BBE subscri...

helmetcityinternational.com XSS vulnerability

On the 03.01.2018 security researcher reported a XSS vulnerability affecting the helmetcityinternational.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 3...

benamusements.com XSS vulnerability

On the 02.01.2018 security researcher reported a XSS vulnerability affecting the benamusements.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 2 January, 2018...

forbes.com.dnstree.com XSS vulnerability

On the 30.12.2017 security researcher reported a XSS vulnerability affecting the forbes.com.dnstree.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 30 Decembe...

energy.gov.dnstree.com XSS vulnerability

On the 29.12.2017 security researcher reported a XSS vulnerability affecting the energy.gov.dnstree.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 29 Decembe...