4440 matches found
Anonymous Messaging App Sarahah to Halt Collection of User Data With Next Update
Sarahah, the anonymous messaging app that shot to the top of app stores earlier this summer, says it plans to remove a feature that uploads users’ contacts, including phone numbers and email addresses to the company’s servers, in the next update. The app’s creator, Zain al-Abidin Tawfiq, caught...
Beware! Viral Sarahah App Secretly Steals Your Entire Contact List
Are you also one of those 18 Million users using SARAHAH? You should beware of this app because the anonymous feedback application may not be as private as it really sounds. Sarahah is a newly launched app that has become one of the hottest iPhone and Android apps in the past couple of weeks,...
CVE-2017-9511
The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system...
CVE-2017-9512
The mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to access sensitive information, for example email addresses of committers, as it lacked permission checks...
PT-2017-18981 · Atlassian · Fisheye/Crucible
Name of the Vulnerable Software and Affected Versions: Atlassian Fisheye and Crucible versions prior to 4.4.1 Description: The issue allows anonymous remote attackers to access sensitive information, such as email addresses of committers, due to a lack of permission checks in the...
Automated Logic WebCTRL 6.5 - Unrestricted File Upload / Remote Code Execution
!/usr/bin/env python -- coding: utf8 -- Automated Logic WebCTRL 6.5 Unrestricted File Upload Remote Code Execution Vendor: Automated Logic Corporation Product web page: http://www.automatedlogic.com Affected version: ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior ALC WebCTRL, SiteScan Web 6.1 and...
Sony PlayStation Social Media Accounts Hacked; Claims PSN Database Breach
After hacking social media accounts of HBO and its widely watched show Game of Thrones, a notorious group of hackers calling itself OurMine took control over the official Twitter and Facebook accounts for Sony's PlayStation Network PSN on Sunday. After taking over the accounts, OurMine, Saudi...
OpDomesticTerrorism: Anonymous shut down Charlottesville city website
By Waqas The online hacktivist group Anonymous has claimed responsibility for carrying This is a post from HackRead.com Read the original post: OpDomesticTerrorism: Anonymous shut down Charlottesville city website...
Symantec Releases Security Update
Symantec has released an update to address vulnerabilities in the Symantec Messaging Gateway. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the Symantec Security Advisory and...
Tor Project Opens Bounty Program To All Researchers
The Tor Project announced today the launch of a public bug bounty program to encourage security researchers to privately report issues they find in the group’s software. Unlike its previous invite-only bounty program launched last year, this bounty program will be open to all bounty hunters throu...
Application launch using Anonymous user account resets the Session Limit Timer to 10
While launching an application for unauthenticated/Anonymous user, the idle tab for the Anon account might default back to 10 minutes even after manually setting it to some other value. The following steps can be followed to test the behavior: From a VDA running 7.9 or higher, run the below .exe ...
Windows SMB PsImpersonateClient null token vulnerability
Added: 07/13/2017 CVE: CVE-2017-0144 BID: 96704 Background Server Message Block SMB is the protocol used by Microsoft Windows computers to communicate over a network. Problem A remote attacker can execute arbitrary commands with SYSTEM privileges by overwriting the token to a null value and forci...
CVE-2017-10970: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php...
[SECURITY] [DSA 3902-1] jabberd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3902-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 05, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3902-1] jabberd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3902-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 05, 2017 https://www.debian.org/security/faq -...
CVE-2017-1258
IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 124685...
Authentication flaw
IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 124685...
CVE-2017-1258: Improper Authentication
IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 124685...
jabberd2 authentication bypass vulnerability
jabberd2 is a live chat server based on XMMP. A security vulnerability exists in jabberd2 that allows remote attackers to bypass security authentication using SASL ANONYMOUS by submitting a special request...