9609 matches found
PHP calendar extension integer overflow vulnerability
PHP is a popular programming language. Multiple integer overflow vulnerabilities in the PHP calendar extension allow remote attackers to cause a denial of service attack by passing a specially crafted year value to the GregorianToSdn or JulianToSdn functions...
CVE-2015-0565
creationtimestamp| type| source ---|---|--- 2015-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36311 2015-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36310 2020-02-25 22:28:10+00:00| seen| https://t.me/cibsecurity/10080...
CVE-2015-1372
creationtimestamp| type| source ---|---|--- 2015-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35914...
Certificate Transparency Moves Forward With First Independent Log
The Certificate Transparency scheme proposed by Google engineers has taken a couple of significant steps forward recently, with the approval of the first independent certificate log and the passing of a deadline for all extended validation certificates to be CT-compliant or lose the green indicat...
WordPress 'year' Cross-Site Scripting (XSS)
...
Threat Outbreak Alert RuleID10778: Email Messages Distributing Malicious Software on July 27, 2014
Medium Alert ID: 35054 First Published: 2014 July 29 14:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10778 may contain the following files: Name | Siz...
phpfreeBB 1.0 - Remote BLIND SQL Injection Vulnerability
No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || phpfreeBB 1.0 Remote BLIND SQL Injection Vulnerability Discovered By : Moudi Contact : [email protected]...
VirtualDJ Trial 6.0.6 "New Year Edition" - .m3u Exploit (0day)
No description provided by source. /VirtualDJ Trial v6.0.6 New Year Edition PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ includestdio.h includewindows.h includestring.h includegetopt.h includeunistd.h /----prototypes---/ int...
OpenSSL issued a warning: memory 1 0 years of vulnerability may be hackers for“man in the middle”attack-vulnerability warning-the black bar safety net
On Thursday, the OpenSSL Foundation issued a warning that one already exists 1 0 years of the vulnerabilities could lead to hackers through the use of OpenSSL to encrypt the traffic to launch“man in the middle”attack. Information security experts are still trying to solve the OpenSSL encryption...
Dennis Fisher and Mike Mimoso Discuss Edward Snowden, NSA and the new OpenSSL Vuln
Dennis Fisher and Mike Mimoso discuss the changes in the year since the first stories broke regarding Edward Snowden and the NSA and the new OpenSSL vulnerability. Download: digitalunderground155.mp3 Music by Chris Gonsalves...
CVE-2013-0173
Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack...
Jigowatt PHP Event Calendar "year" SQL注入漏洞
Jigowatt PHP Event Calendar是一款日历WEB应用程序。 Jigowatt PHP Event Calendar calendar/dayview.php不正确过滤"year"参数数据，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 Jigowatt PHP Event Calendar 2.x 目前没有详细解决方案： http://codecanyon.net/item/php-event-calendar/47723...
CVE-2014-100012
creationtimestamp| type| source ---|---|--- 2014-02-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31898...
CVE-2014-1204
creationtimestamp| type| source ---|---|--- 2014-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31578...
HackInTheBox Quartal Magazine - eZine Issue 10
Document Title: =============== HackInTheBox Quartal Magazine - eZine Issue 10 References: =========== Download: https://www.vulnerability-lab.com/resources/documents/hitbez10.pdf Original: https://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-010.pdf Release Date: ============= 2014-01-31...
PT-2014-4252 · Drupal · Drupal
Name of the Vulnerable Software and Affected Versions: Drupal versions 7.14 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the year parameter to the "eventcalander/" endpoint. This issue has been disputed by the Drupal Security Tea...
CVE-2014-1607: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the EventCalendar module for Drupal 7.14 allows remote attackers to inject arbitrary web script or HTML via the year parameter to eventcalander/. NOTE: this issue has been disputed by the Drupal Security Team; it may be site-specific. If so, then this CVE...
BlackPOS Malware used in TARGET Data Breach developed by 17-Year Old Russian Hacker
The Holiday data breach at TARGET appeared to be part of a broad and highly sophisticated international hacking campaign against multiple retailers, involving the heist of possibly 110 million Credit-Debit cards, and personal information. Target confirmed last weekend that a malicious software wa...
Happy Holidays and Merry Christmas from 'The Hacker News'
The Christmas spirit has finally arrived. It's Christmas Day, a time for family and friends.We have had another wonderful year here at 'The Hacker News', so we not only want to wish you a Happy Holidays and Merry Christmas, but also thank you for reading our articles, commenting, sending tips and...