3988 matches found
SQL Injection Vulnerability in EDI CMS ad***_na***.asp Page
ETA CMS is a simple, practical and efficient website builder. A SQL injection vulnerability exists in the adna.asp page of EDA CMS, which can be exploited by attackers to obtain sensitive information from the database...
SQL injection vulnerability in beescm backend ad***_fl***.php file
BEESCMS is PHP+MYSQL architecture, multi-language system, easy to expand content modules, diversified template styles, simple and powerful template production, professional SEO optimization, easy to operate the background, fully meet the corporate website, foreign trade websites, institutions,...
CVE-2018-10874
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result...
Copycat criminals abuse Malwarebytes brand in malvertising campaign
While exploit kit activity has been fairly quiet for some time now, we recently discovered a threat actor creating a copycat—fake—Malwarebytes website that was used as a gate to the Fallout EK, which distributes the Raccoon stealer. The few malvertising campaigns that remain are often found on...
CVE-2019-12436
Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit. Mitigation Return to the default configuration ...
openSUSE Security Update : opera (openSUSE-2020-402)
This update for opera fixes the following issues : Update to version 67.0.3575.97 - DNA-84063 Open URL in new tab with Go to web address in search/copy popup and right mouse click context menu - DNA-84780 Search in Search and Copy popup opens tab in wrong position from popup window - DNA-84786...
SQL Injection Vulnerability in Heybbs Backend ad**.php Page
Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background ad.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
Apple Safari Blocks Ad-Targeting Cookie Support
Apple has released an update to its Safari browser that blocks third-party cookies, following an announcement by Google that it would do the same for its Chrome browser. Through the release of Safari 13.1 on Tuesday, alongside some changes to Apple’s Intelligent Tracking Prevention ITP in iOS and...
Tekya Malware Threatens Millions of Android Users via Google Play
Researchers have discovered a new family of auto-clicker malware that commits mobile ad fraud, lurking in 56 apps on the Google Play store. Collectively, they have been downloaded nearly a million times worldwide. A team from Check Point Software recently discovered the malware, dubbed Tekya, whi...
Dozens of Android Apps for Kids on Google Play Store Caught in Ad Fraud Scheme
More than 50 Android apps on the Google Play Store—most of which were designed for kids and had racked up almost 1 million downloads between them—have been caught using a new trick to secretly click on ads without the knowledge of smartphone users. Dubbed "Tekya," the malware in the apps imitated...
Dozens of Android Apps for Kids on Google Play Store Caught in Ad Fraud Scheme
More than 50 Android apps on the Google Play Store—most of which were designed for kids and had racked up almost 1 million downloads between them—have been caught using a new trick to secretly click on ads without the knowledge of smartphone users. Dubbed "Tekya ," the malware in the apps imitate...
PT-2020-12343
Name of the Vulnerable Software and Affected Versions Nagios XI version 5.6.11 Description The issue allows for XSS via the username parameter in the includes/components/ldap ad integration/ endpoint. Recommendations For Nagios XI version 5.6.11, avoid using the username parameter in the affected...
PT-2020-12344
Name of the Vulnerable Software and Affected Versions Nagios XI version 5.6.11 Description The issue allows for XSS via the password parameter in the includes/components/ldap ad integration/ endpoint. Recommendations For Nagios XI version 5.6.11, avoid using the password parameter in the...
CVE-2020-10678
CVE-2020-10678 affects Octopus Deploy prior to 2020.1.5 when running with on-premises Active Directory linked to the Octopus server. The issue is an authenticated user privilege-escalation bug described across multiple sources (Red Hat, CNVD, NVD, etc.). The connected documents identify the affec...
SQL Injection Vulnerability in joyplus-cms ad***_vo***_to***.php File
joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . joyplus-cms advoto.php file contains a SQL...
Advanced Ads < 1.17.4 - Authenticated Reflected XSS via Admin Dashboard
The Advanced Ads – Ad Manager & AdSense WordPress plugin was affected by an Authenticated Reflected XSS via Admin Dashboard security vulnerability...
Trojan Raids Android Users' Cookie Jars
Everyone loves cookies – including cybercriminals. Their tastes however can run to a different sort of cookie, as evidenced by a fresh strain of Android malware that may be implanted prior to users purchasing a device. Appropriately dubbed “Cookiethief” by the Kaspersky researchers who discovered...
Trojan Raids Android Users' Cookie Jars
Everyone loves cookies – including cybercriminals. Their tastes however can run to a different sort of cookie, as evidenced by a fresh strain of Android malware that may be implanted prior to users purchasing a device. Appropriately dubbed “Cookiethief” by the Kaspersky researchers who discovered...
