CVE-2019-19092 ABB eSOMS: Viewstate without MAC Signature

ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code MAC. Alterations to Viewstate might thus not be noticed...

AWSGen.py - Generates Permutations, Alterations And Mutations Of AWS S3 Buckets Names

AWSGen.py is a simple tool for generates permutations, alterations and mutations of AWS S3 Buckets Names. Download AWSGen.py...

Security Bulletin: IBM QRadar SIEM and QRadar Incident Forensics are vulnerable to cross-site request forgery (CVE-2016-9730)

Summary IBM QRadar SIEM and Incident Forensics allow web requests for sensitive operations to be stored in 3rd party websites which can lead to unauthorized alterations of the product and user data. Vulnerability Details CVEID: CVE-2016-9730 DESCRIPTION: IBM QRadar Incident Forensics is vulnerabl...

PHP Scripts Mall Responsive Realestate Script Cross-Site Request Forgery Vulnerability

Responsive Realestate Script is a script for building real estate websites. A cross-site request forgery vulnerability exists in PHP Scripts Mall Responsive Realestate Script. A remote attacker can exploit this vulnerability by using admin/general to trick users into injecting web script or HTML,...

LinkedIn Intro App a Man in the Middle Attack

This is one introduction you may not want to make. LinkedIn’s release of its Intro app yesterday for Apple iOS mobile devices raised more than a few eyebrows for behaviors that are causing security experts to worry. Intro is an integrated service that works hand-in-hand with the Apple Mail app...

webramp.DoS.txt

Date: Wed, 31 Mar 1999 15:28:22 -0500 EST From: X-Force To: [email protected] Cc: X-Force Subject: ISSalert: ISS Security Advisory -- WebRamp Denial of Service Attacks TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with...