Apple Mac OS X Security Updates (HT208692)-02

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-3820

Kibana versions after 6.1.0 and before 6.1.3 had a cross-site scripting XSS vulnerability in labs visualizations that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users...

Animal abuse website hacked; thousands of users exposed

By Waqas An animal abuse website or otherwise called a "bestiality" platform This is a post from HackRead.com Read the original post: Animal abuse website hacked; thousands of users exposed...

Shijiazhuang Mingquan Network Technology Co., Ltd. Yiyangzhi APP has information leakage vulnerability and ultra vires access vulnerability

Yiyangzhi APP is an application software that combines several services of tuina, massage, foot care, cupping and gua sha launched by Shijiazhuang Mingquan Network Technology Co. Shijiazhuang Mingquan Network Technology Co., Ltd. Yiyangzhi APP suffers from an information leakage vulnerability and...

Facebook Cracks Down On Data Misuse With Expanded Bug Bounty Program

Facebook said in the coming weeks it will expand its bug bounty program in an attempt to crackdown on data misuse by third-party app developers. The company’s bug bounty program, first started in 2011, prompts researchers to find vulnerabilities on the social media platform – but now will be...

Ensure Application Security with Zend Server and RIPS

Zend Server is the ultimate and most secure software platform for deploying, monitoring, debugging, maintaining, and optimizing enterprise PHP applications. It also helps to keep the technology stack up-to-date and to avoid security risks that stem from outdated components. However, most of the...

What Facebook’s Cambridge Analytica problem means for your data

As you may already know, there's been a security meltdown at Facebook, thanks to a company called Cambridge Analytica and Donald Trump. Facebook CEO Mark Zuckerberg insists it wasn't a breach, which is technically true. But that doesn't change the fact that the data of 50 million users was obtain...

Facebook and Cambridge Analytica – What's Happened So Far

Top Story— Facebook has just lost over $60 billion in market value over the past two days—that's more than Tesla's entire market capitalisation and almost three times that of Snapchat. Facebook shares plunge over revelations that personal data of 50 million users was obtained and misused by Briti...

Zomato: [Zomato Android/iOS] Theft of user session

Hi, I'd like to report a bug which allows to theft user data even without installing third-party apps. Activity xml is exported, and can be accessed by browser. When any WebView in a client app, or a browser meets a zomato://etc URL it will automatically launch Zomato app. File...

Facebook Data Privacy Policies Bashed By Critics After Cambridge Analytica Incident

Facebook is in hot water after acknowledging that a consulting group – that has worked on several high profile political campaigns, including that of President Donald Trump’s – used the social media company’s platform to harvest the data of 50 million users. The company last week said that in 201...

Sichuan Jiayuan Electronic Technology Co., Ltd. has an overstepping access vulnerability in the Medjia Cloud

The MediKarma Cloud Platform is a forward-looking medical model solution under the "Internet+Medicine" model. Sichuan Jiayuan Electronic Technology Co., Ltd. medical good cloud WeChat registration platform there is an overstepping access vulnerability, the attacker can use the vulnerability to...

U.S. Dept Of Defense: Publicly accessible Order confirmations leaking User Emails on ███

Summary: I noticed that a user's order confirmation was publicly accessible leaking email information Description: An attacker can gleam sensitive information that is stored in the order confirmation file Impact Medium Step-by-step Reproduction Instructions...

NetIQ Sentinel Information Disclosure Vulnerability (CNVD-2018-06631)

NetIQ Sentinel is a security information and event management SIEM solution from US-based NetIQ. The solution collects, stores and analyzes log data and reports on it, as well as analyzing security event data in real time. A security vulnerability exists in NetIQ Sentinel versions prior to 8.1.x...

Facebook Onavo VPN app collects user data even when its off

By Carolina In February this year, Facebook started pushing its Android and iPhone This is a post from HackRead.com Read the original post: Facebook Onavo VPN app collects user data even when its off...

Make way for HTTPS - Starting July 2018, Google Chrome will mark all HTTP sites as "not secure"

Days of clear-text HTTP, the original but insecure foundation for data communication over the web, are numbered. Over the past few years, Google and others such as the Internet Architecture Board, Mozilla, and Apple have nudged developers to encrypt and authenticate their websites using HTTPS whi...

Hangzhou Dana Technology Co., Ltd. Shape and Color APP has arbitrary account login vulnerability

Shape and Color is a new app for identifying flowers and sharing nearby flowers launched by Hangzhou Dana Technology Co. An arbitrary account login vulnerability exists in the Shape and Color APP of Hangzhou Dana Technology Co. The vulnerability is due to the failure of the server side to...

Design/Logic Flaw

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this...

CVE-2018-0489

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this...

Weblication CMS Core & Grid v12.6.24 - XSS Vulnerabilities

Document Title: =============== Weblication CMS Core & Grid v12.6.24 - XSS Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2121 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-13002 CVE-ID: ======= CVE-2018-13002 Release Date:...

Makeup Busters App Has Information Leakage Vulnerability

Makeup Treasure APP is a makeup teaching APP based on Android system, the APP makeup information is practical and comprehensive, you can check tens of thousands of makeup tips to solve any needs in makeup. An information leakage vulnerability exists in Makeup Dictionary APP version 6.0.1. An...