195 matches found
ProtonMail Logs Activist's IP Address With Authorities After Swiss Court Order
End-to-end encrypted email service provider ProtonMail has drawn criticism after it ceded to a legal request and shared the IP address of anti-gentrification activists with law enforcement authorities, leading to their arrests in France. The Switzerland-based company said it received a "legally...
swiss-gear.dostavka2.me Cross Site Scripting vulnerability OBB-2123518
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
TYPO3 SQL Injection Vulnerability (CNVD-2022-17982)
TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Typo3 association.TYPO3 Newsletter is vulnerable to SQL injection, which stems from vulnerability to SQL injection when processing returned emails. No detailed vulnerability details are currently...
TYPO3 Information Disclosure Vulnerability (CNVD-2022-17979)
TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Typo3 association.TYPO3 has an information disclosure vulnerability that could be exploited by an attacker to obtain all application registration data...
TYPO3 Cross-Site Scripting Vulnerability (CNVD-2022-17986)
TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Typo3 association.TYPO3 suffers from a cross-site scripting vulnerability that stems from the fact that the QueryGenerator and QueryView components are vulnerable to reflected and persistent cross-sit...
TYPO3 Cross-Site Scripting Vulnerability (CNVD-2022-17985)
TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Typo3 association.TYPO3 has a cross-site scripting vulnerability that stems from the fact that when the Page TSconfig settings are not coded correctly, the corresponding page preview module Web>View i...
TYPO3 Dynamic Content Element SQL注入漏洞
TYPO3 Dynamic Content Element is a mobile application from the Swiss company TYPO3. TYPO3 Dynamic Content Element has a SQL injection vulnerability, which stems from insufficient filtering of user-supplied data and can be exploited by attackers to inject SQL to obtain data-sensitive information...
SilverFish: Swiss firm accesses servers linked to SolarWinds hackers
By Deeba Ahmed The group used many different methods to attack their victims apart from exploiting the vulnerability in Texas-based firm SolarWinds software. This is a post from HackRead.com Read the original post: SilverFish: Swiss firm accesses servers linked to SolarWinds hackers...
US charges Swiss hacker behind massive Verkada security camera hack
By Habiba Rashid The hacker Till Kottmann aka “deletescape” has been indicted for conspiracy, wire fraud, and aggravated identity theft by the US DOJ. This is a post from HackRead.com Read the original post: US charges Swiss hacker behind massive Verkada security camera hack...
Tesla Ransomware Hacker Pleads Guilty; Swiss Hacktivist Charged for Fraud
The U.S. Department of Justice yesterday announced updates on two separate cases involving cyberattacks—a Swiss hacktivist and a Russian hacker who planned to plant malware in the Tesla company. A Swiss hacker who was involved in the intrusion of cloud-based surveillance firm Verkada and exposed...
Tesla Ransomware Hacker Pleads Guilty; Swiss Hacktivist Charged for Fraud
The U.S. Department of Justice yesterday announced updates on two separate cases involving cyberattacks—a Swiss hacktivist and a Russian hacker who planned to plant malware in the Tesla company. A Swiss hacker who was involved in the intrusion of cloud-based surveillance firm Verkada and exposed...
European Authorities Disrupt Emotet — World's Most Dangerous Malware
Law enforcement agencies from as many as eight countries dismantled the infrastructure of Emotet, a notorious email-based Windows malware behind several botnet-driven spam campaigns and ransomware attacks over the past decade. The coordinated takedown of the botnet on Tuesday — dubbed "Operation...
SharpMapExec - A Sharpen Version Of CrackMapExec
A sharpen version of CrackMapExec. This tool is made to simplify penetration testing of networks and to create a swiss army knife that is made for running on Windows which is often a requirement during insider threat simulation engagements. Besides scanning for access it can be used to identify...
TYPO3 cross-site scripting vulnerability (CNVD-2021-26149)
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. TYPO3 Fluid suffers from a cross-site scripting vulnerability, no detailed vulnerability details are provided at this time...
swiss-trottinette.ch Cross Site Scripting vulnerability OBB-1437423
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bestlist.swiss-athletics.ch Cross Site Scripting vulnerability OBB-1401481
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Swiss-Swedish Diplomatic Row Over Crypto AG
Previously I have written about the Swedish-owned Swiss-based cryptographic hardware company: Crypto AG. It was a CIA-owned Cold War operation for decades. Today it is called Crypto International, still based in Switzerland but owned by a Swedish company. Its back in the news: Late last week,...
fortis-swiss.com Improper Access Control vulnerability OBB-1374607
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
B-swiss 3 Digital Signage System 3.6.5 - Cross-Site Request Forgery (Add Maintenance Admin)
Exploit Title: B-swiss 3 Digital Signage System 3.6.5 - Cross-Site Request Forgery Add Maintenance Admin Date: 2020-09-16 Exploit Author: LiquidWorm Vendor Homepage: https://www.b-swiss.com Version: 3.6.5 Affected version: 3.6.5,3.6.2,3.6.1,3.6.0,3.5.80,3.5.40,3.5.20,3.5.00,3.2.00,3.1.00 !--...
B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure
Exploit Title: B-swiss 3 Digital Signage System 3.6.5 - Database Disclosure Date: 2020-09-16 Exploit Author: LiquidWorm Vendor Homepage: https://www.b-swiss.com Version: 3.6.5 Affected version: 3.6.5,3.6.2,3.6.1,3.6.0,3.5.80,3.5.40,3.5.20,3.5.00,3.2.00,3.1.00 B-swiss 3 Digital Signage System 3.6....