1051 matches found
wer-war-hitler.de Cross Site Scripting vulnerability OBB-1332885
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Enigma Machine for Sale
A four-rotor Enigma machine -- with rotors -- is up for auction...
wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)
It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution...
Ann Mitchell, Bletchley Park Cryptanalyst, Dies
Obituary...
Cross-site Request Forgery (CSRF)
JBoss is vulnerable to Cross-site request forgery CSRF. flaw was found in the JMX Console. A remote attacker could use this flaw to deploy a WAR file of their choosing on the target server, if they are able to trick a user, who is logged into the JMX Console as the admin user, into visiting a...
Story of Gus Weiss
This is a long and fascinating article about Gus Weiss, who masterminded a long campaign to feed technical disinformation to the Soviet Union, which may or may not have caused a massive pipeline explosion somewhere in Siberia in the 1980s, if in fact there even was a massive pipeline explosion...
XXE vulnerability in websphere-deployer
websphere-deployer 1.6.1 and earlier does not configure the XML parser to prevent XML external entity XXE attacks. This could be exploited by a user with Job/Configure permissions to upload a specially crafted war file containing a WEB-INF/ibm-web-ext.xml which is parsed by the plugin. As of...
The Doomsday Clock Moves Closer Than Ever to Midnight
Since the advent of the clock—even during the peak years of the Cold War—the minute hand has never advanced past the 11:58 mark...
CVE-2019-14768
An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to deploy a new WebApp WAR file to the Tomcat server via Path Traversal, allowing remote code execution with SYSTEM privileges...
How Tweets Could Prevent War, an App Store Dilemma, and More News
Catch up on the most important news from today in two minutes or less...
Did Donald Trump and Iran Use Twitter to Prevent a War?
Tweets from US president Donald Trump and Iranian foreign minister Javad Zarif Tuesday offered a fascinating glimpse at how world leaders can communicate more quickly and directly than ever in times of crisis...
publications.armywarcollege.edu Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1008155 Security Researcher devl00p Helped patch 2582 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...
A week in security (October 7 – 13)
Last week on Malwarebytes Labs, we peered into the possible future of cybersecurity insurance, described the process for securing today’s managed service provider, and provided an in-depth explainer on the business espionage tactic known as “war shipping.” Further, in considering the intersection...
Explained: war shipping
Yesterday, Mike from the mailroom came up and asked whether I knew anyone called “Simon Smith.” He received an envelope addressed to our company and to the attention of Mr. Smith, but there was no one by that name on his list of employees. It wasn’t on mine either and HR was unaware of a person b...
Cross-Site Scripting (XSS)
jspwiki-war is vulnerable to cross-site scripting XSS. The remember parameter in preview.jsp was not handled properly to escape malicious script injection, allowing to trigger the attack through it...
Cross-site Scripting (XSS)
jspwiki-war is vulnerable to cross-site scripting XSS. The vulneability exists through the plain editor section drop-down where html is not escaped...
vermontcivilwar.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-960116 Security Researcher KhanJanny Helped patch 3061 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting vermontcivilwar.org websi...
Cold War Analogies are Warping Tech Policy
Opinion: Politicians and pundits' fixation with flawed Cold War metaphors have produced overly combative policies on emerging tech...
Cisco Data Center Network Manager Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Data Center Network Manager Unauthenticated Remote Code Execution', 'Description' = %q DCNM exposes a file upload servlet FileUploadServlet...
What Is Cyberwar? The Complete WIRED Guide
The threat of cyberwar looms over the future: a new dimension of conflict capable of leapfrogging borders and teleporting the chaos of war to civilians thousands of miles beyond its front...