TBK DVR4104 / DVR4216 Credential Disclosure

-- coding: utf-8 -- import json import requests import argparse import tableprint as tp class Colors: BLUE = '\03394m' GREEN = '\03332m' RED = '\0330;31m' DEFAULT = '\0330m' ORANGE = '\03333m' WHITE = '\03397m' BOLD = '\0331m' BRCOLOUR = '\0331;37;40m' banner = ''' ..--.. ..... .-- ..... . .": "-...

Foxit Reader U3D Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Twitter Urges Users to Change Passwords Due to Glitch

Twitter said Thursday that a glitch caused account passwords to be stored in plain text on an internal log, sending users across the platform scrambling to change their passwords. The social media company said that it found and has fixed the glitch, and its investigation shows no indication of a...

Foxit Reader ConvertToPDF_x86 BMP Parsing Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the ConvertToPDFx86.dll implementation that can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of the length of...

Foxit Reader Heap Buffer Overflow Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in BMP graphics parsing, which can be exploited by an attacker to execute arbitrary code in the context of the current process, due to a lack of proper validation of user-supplied data...

Foxit Reader XFA record remove remote code execution vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA record remove method, which can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of user-supplied data...

Leaking ads

When we use popular apps with good ratings from official app stores we assume they are safe. This is partially true – usually these apps have been developed with security in mind and have been reviewed by the app store's security team. However, we found that because of third-party SDKs many popul...

Multiple Auth0 Library Authentication Bypass Vulnerabilities

Auth0.js is a client-side library for Auth0, and Lock is an embeddable login form for desktops, tablets, and mobile devices. An authentication bypass vulnerability exists in Auth0 Lock 10 and auth0.js 8, which can be exploited by an attacker to log in as an administrator, perform administrative...

Wukong CRM version 0.5.5 suffers from password reset vulnerability

Wukong CRM is a permanent open source and free CRM management system. A password reset vulnerability exists in Wukong CRM version 0.5.5. An attacker can exploit this vulnerability to gain unauthorized access to user information and reset any user's password...

Privacy Advocates Blast Facebook After Data Scraping Scandal

Privacy advocates are up in arms after CEO Mark Zuckerberg said this week a Facebook reverse search tool may have compromised the data of the social network’s two billion users. The feature in question was designed to enable users to enter a Facebook user’s phone numbers or email addresses into t...

Apple Mac OS X Security Updates (HT208692)-02

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-3820

Kibana versions after 6.1.0 and before 6.1.3 had a cross-site scripting XSS vulnerability in labs visualizations that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users...

Animal abuse website hacked; thousands of users exposed

By Waqas An animal abuse website or otherwise called a "bestiality" platform This is a post from HackRead.com Read the original post: Animal abuse website hacked; thousands of users exposed...

Shijiazhuang Mingquan Network Technology Co., Ltd. Yiyangzhi APP has information leakage vulnerability and ultra vires access vulnerability

Yiyangzhi APP is an application software that combines several services of tuina, massage, foot care, cupping and gua sha launched by Shijiazhuang Mingquan Network Technology Co. Shijiazhuang Mingquan Network Technology Co., Ltd. Yiyangzhi APP suffers from an information leakage vulnerability and...

Facebook Cracks Down On Data Misuse With Expanded Bug Bounty Program

Facebook said in the coming weeks it will expand its bug bounty program in an attempt to crackdown on data misuse by third-party app developers. The company’s bug bounty program, first started in 2011, prompts researchers to find vulnerabilities on the social media platform – but now will be...

Ensure Application Security with Zend Server and RIPS

Zend Server is the ultimate and most secure software platform for deploying, monitoring, debugging, maintaining, and optimizing enterprise PHP applications. It also helps to keep the technology stack up-to-date and to avoid security risks that stem from outdated components. However, most of the...

What Facebook’s Cambridge Analytica problem means for your data

As you may already know, there's been a security meltdown at Facebook, thanks to a company called Cambridge Analytica and Donald Trump. Facebook CEO Mark Zuckerberg insists it wasn't a breach, which is technically true. But that doesn't change the fact that the data of 50 million users was obtain...

Facebook and Cambridge Analytica – What's Happened So Far

Top Story— Facebook has just lost over $60 billion in market value over the past two days—that's more than Tesla's entire market capitalisation and almost three times that of Snapchat. Facebook shares plunge over revelations that personal data of 50 million users was obtained and misused by Briti...

Zomato: [Zomato Android/iOS] Theft of user session

Hi, I'd like to report a bug which allows to theft user data even without installing third-party apps. Activity xml is exported, and can be accessed by browser. When any WebView in a client app, or a browser meets a zomato://etc URL it will automatically launch Zomato app. File...

Facebook Data Privacy Policies Bashed By Critics After Cambridge Analytica Incident

Facebook is in hot water after acknowledging that a consulting group – that has worked on several high profile political campaigns, including that of President Donald Trump’s – used the social media company’s platform to harvest the data of 50 million users. The company last week said that in 201...