10305 matches found
Emergency Adobe Flash Player Security Update Patches 0Day
Adobe today released an out-of-band security update for Flash Player that patches a vulnerability the company said is currently being exploited. Adobe Flash Player version 12.0.0.43 and earlier for Windows and Mac are affected as is 11.2.202.335 and earlier on Linux. The vulnerability,...
Chrome Pop-Up Warns Windows Users of Browser Hijacking
A rising number of online scams involve the modification of browser settings where a hacker spikes a free download or website with malware. The end result is generally a click-fraud scheme of some kind where the new browser settings might include spiked search engine pages or a new home page...
Icefog Cyberespionage Campaign Hit 3 US Oil, Gas Companies
When the curtain was peeled back on the Icefog targeted espionage campaign in September, a new type of operator was unveiled, one that took the persistence out of advanced persistent threats APT. Researchers at Kaspersky Lab noted in uncovering Icefog that the attacks against the defense supply...
CVE-2014-0621
Multiple cross-site request forgery CSRF vulnerabilities in Technicolor formerly Thomson TC7200 STD6.01.12 allow remote attackers to hijack the authentication of administrators for requests that 1 perform a factory reset via a request to goform/system/factory, 2 disable advanced options via a...
WordPress Advanced Dewplayer 'dew_file' Directory Traversal Vulnerability
WordPress Advanced Dewplayer Plugin is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Movable Type Rich Text Editor脚本注入漏洞
Movable Type是一款基于WEB的网络博客系统。 由于通过网页键入的输入在富文本编辑器显示之前缺少过滤。在恶意数据被查看时，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 下列产品和版本存在漏洞： Movable Type Pro version 6.0 Movable Type Pro versions 5.2.x, 5.1x, and 5.0x Movable Type Open Source MTOS versions 5.2.x, 5.1x, and 5.0x Movable Type Advanced / Movable Type...
Technicolor TC7200多个跨站请求伪造漏洞
CVECAN ID: CVE-2014-0621 Technicolor TC7200是调制解调器和路由器产品。 Technicolor TC7200在实现上存在多个跨站请求伪造漏洞，成功利用后可更改IP过滤选项、防火墙设置等。 0 technicolor TC7200 STD6.01.12 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew ays/cable-modems-gatewa...
Directory traversal
Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter...
Technicolor TC7200 - Multiple XSS / CSRF Vulnerabilities
Exploit for hardware platform in category web applications Exploit Title: Technicolor TC7200 - Multiple XSS Vulnerabilities Google Dork: N/A Date: 02-01-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew...
Technicolor TC7200 - Multiple Cross-Site Request Forgery Vulnerabilities
Exploit Title: Technicolor TC7200 - Multiple CSRF Vulnerabilities Google Dork: N/A Date: 02-01-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew ays/cable-modems-gateways/tc7200-tc7300 Software Link: N/A Version:...
Technicolor TC7200 - Multiple Cross-Site Request Forgery Vulnerabilities
Technicolor TC7200 - Multiple Cross-Site Request Forgery Vulnerabilities Exploit Title: Technicolor TC7200 - Multiple CSRF Vulnerabilities Google Dork: N/A Date: 02-01-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage:...
CVE-2013-7240
The CVE-2013-7240 entry affects the WordPress plugin Advanced Dewplayer (version 1.2). A directory traversal flaw exists in the plugin’s download-file.php that allows an attacker to read arbitrary files by manipulating the dew_file parameter (dot-dot traversal). Exploitation details are consisten...
Technicolor TC7200 Cross Site Request Forgery
Exploit Title: Technicolor TC7200 - Multiple CSRF Vulnerabilities Google Dork: N/A Date: 02-01-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew ays/cable-modems-gateways/tc7200-tc7300 Software Link: N/A Version:...
[Harden SSL/TLS] Hardening the SSL/TLS settings
“Harden SSL/TLS” allows hardening the SSL/TLS settings of Windows 2000,2003,2008,2008R2, XP,Vista,7. It allows locally and remotely set SSL policies allowing or denying certain ciphers/hashes or complete ciphersuites. This tool specific allows setting policies with regards to what ciphers and...
Russian hackers stole Personal details of 54 million Turkish Citizens
The Publicized Hacks, Cyber attacks and Data breaches continue to increase, and the majority of attacks are from outsiders. Recently, Some unknown Russian hackers have reportedly stolen Personal details of nearly 54 million Turkish citizens, about 70% of the whole Turkish population. According to...
DEBIAN-CVE-2013-6885
The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service system hang via a crafted application, aka the errata 793 issue...
PT-2013-6168 · Amd +2 · Amd Processors +2
Name of the Vulnerable Software and Affected Versions: AMD processors versions 16h 00h through 0Fh Description: The issue arises from the microcode's improper handling of the interaction between locked instructions and write-combined memory types. This allows local users to cause a denial of...
Design/Logic Flaw
NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code via a request to exec.php, aka the "Advanced | Execute Command" feature. NOTE: this issue might not be a vulnerability, since it appears to be part of legitimate, intentionally-exposed functionality b...
Terminator RAT became more sophisticated in recent APT attacks
Advanced Persistent Threat APT is a term referring to targeted attacks on enterprises and other organizations and recently referred to what appeared to be nation-state intelligence agencies using cyber assaults for both conventional espionage and industrial espionage. Advanced threats have target...
