53 matches found
Telling stories securely, with Runa Sandvik: Lock and Code S03E07
In 2017, a former NSA contractor named Reality Winner was arrested for allegedly leaking an internal report to the online news outlet The Intercept. To verify the report itself, a journalist for The Intercept sent an image of the report to the NSA, but upon further inspection, it was revealed tha...
An offer made after auction end can be stolen by an auction winner
Lines of code Vulnerability details Impact An Offer which is made for an NFT when auction has ended, but its winner hasn't received the NFT yet, can be stolen by this winner as transferFromEscrow being called by acceptOffer will transfer the NFT to the winner, finalising the auction, while no...
Code injection
Winner aka ToneWinner desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, aka a "Glowworm" attack...
CVE-2021-38365
The connected documents identify CVE-2021-38365 as affecting ToneWinner (Winner) desktop speakers. The vulnerability allows a remote attacker to recover speech signals from the power-indicator LED using a telescope and an electro-optical sensor, a classically described Glowworm attack. The descri...
CVE-2021-38365: Undefined Security Weakness
Winner aka ToneWinner desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, aka a "Glowworm" attack...
MISA expands portfolio and looks ahead during Microsoft Inspire
This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. Welcome to fiscal year 2022 FY22 and my first official blog as the MISA Lead. It’s been a whirlwind couple of months getting up to speed with all things MISA—closing out FY21...
and-the-winner-is.co.uk Cross Site Scripting vulnerability OBB-1371116
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Congratulations to our Query of the Month Winner for August 2019!
Our Query of The Month competition recognizes the top community-shared query that provides value to other Osquery users. To determine the query of the month, our team selects the customer query that has the most engagement or helps solve an important problem. The winner of the contest each month...
NSA Leaker 'Reality Winner' Gets More Than 5 Years in Prison
A former NSA contractor, who pleaded guilty to leaking a classified report on Russian hacking of the 2016 U.S. presidential election to an online news outlet last year, has been sentenced to five years and three months in prison. Reality Winner, a 26-year-old Georgia woman who held a top-secret...
winner-hosting.com XSS vulnerability
Open Bug Bounty ID: OBB-655117 Description| Value ---|--- Affected Website:| winner-hosting.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Reality Winner, N.S.A. Contractor, Sentenced to 5+ Years in Leak Case
A former NSA contractor, Reality L. Winner, has plead guilty on charges of leaking classified information, regarding a report on election meddling by Russian operatives in the 2016 U.S. elections. She was charged with espionage and was sentenced to more than five years in prison and three years o...
Profile of Reality Winner
New York Magazine published an excellent profile of the single-document leaker Reality Winner...
shop.bandinail.com XSS vulnerability
Open Bug Bounty ID: OBB-261288 Description| Value ---|--- Affected Website:| shop.bandinail.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
The grugq on Reality Winner, the Intercept, and OPSEC
Good commentary...
FBI Arrests NSA Contractor for Leaking Secrets – Here's How they Caught Her
The FBI arrested a 25-year-old NSA contractor on Saturday 3rd June for leaking classified information to an online news outlet which published its report yesterday 5th June — meaning the arrest was made two days before the actual disclosure went online. Reality Leigh Winner, who held a top-secret...
Winner Soccer Evolution - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Winner Soccer Evolution published at the 'play' market has multiple vulnerabilities...
Winner Betting Tips - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Winner Betting Tips published at the 'play' market has multiple vulnerabilities...
Winner Viewer - Kitchen in 3D - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Winner Viewer - Kitchen in 3D published at the 'play' market has multiple vulnerabilities...
Joomla JE Awd Song Component Persistent XSS Vulnerability
No description provided by source. Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/component/awdsong/ Google Dork: inurl:comawdsong Price:$37.00 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd...
Threat Outbreak Alert: Fake Prize Winner Announcement Email Messages on May 27, 2014
Medium Alert ID: 34364 First Published: 2014 May 27 19:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to Romanian-language spam email messages that claim to contain a prize for the recipient. The text in the email message attempts to convince the recipient to...