381 matches found
SpeedPhishing Framework: SPF
This presentation will start by quickly exploring some of the common phishing attack tools and techniques. During the presentation, audience participation will be encouraged in the form of providing examples and personal experience in what phishing techniques people have used and what would be...
CVE-2015-0277
The Service Provider SP in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion. NOTE: this identifier has been SPLIT per ADT2 due ...
PT-2015-4558 · Jboss · Picketlink
Name of the Vulnerable Software and Affected Versions: PicketLink versions prior to 2.7.0 Description: The issue allows remote attackers to log in to other users' accounts via a crafted SAML assertion because the Service Provider SP in PicketLink does not ensure that it is a member of an Audience...
Red Hat PicketLink SAML Assertion AudienceRestriction Security Bypass Vulnerability
Red Hat PicketLink a unified identity management framework for Java applications. A security bypass vulnerability exists in Red Hat PicketLink that could be exploited by an attacker to bypass security restrictions and perform unauthorized access...
PicketLink: SP does not take Audience condition of a SAML assertion into account
A flaw was found in the way PicketLink's Service Provider and Identity Provider handled certain requests. A remote attacker could use this flaw to log to a victim's account via PicketLink...
PicketLink: SP does not take Audience condition of a SAML assertion into account
A flaw was found in the way PicketLink's Service Provider and Identity Provider handled certain requests. A remote attacker could use this flaw to log to a victim's account via PicketLink...
PicketLink: SP does not take Audience condition of a SAML assertion into account
A flaw was found in the way PicketLink's Service Provider and Identity Provider handled certain requests. A remote attacker could use this flaw to log to a victim's account via PicketLink...
PicketLink: SP does not take Audience condition of a SAML assertion into account
A flaw was found in the way PicketLink's Service Provider and Identity Provider handled certain requests. A remote attacker could use this flaw to log to a victim's account via PicketLink...
CVE-2014-6583
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3. allows remote attackers to affect confidentiality and integrity via unknown vectors related to Audience...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3. allows remote attackers to affect confidentiality and integrity via unknown vectors related to Audience...
CVE-2014-6583
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3. allows remote attackers to affect confidentiality and integrity via unknown vectors related to Audience...
X (Formerly Twitter): Improper Verification of email address while saving Account Settings
Signup for Ads on twitter and navigate to "Account Settings" on ads.twitter.com/accounts Enter any email address and save Account Settings. Notice that the email address gets updated successfully. There is no verification email that is sent out to confirm that the email account updated actually...
CVE-2013-7065
The Organic Groups OG module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the oggroupref field...
ABC hacked after anti-Islam politician Interview
The Australian Broadcasting Corporation ABC is investigating data breach after Lateline interviewed Dutch anti-Islam politician Geert Wilders. A hacker going by the handle "Phr0zenMyst" has claimed to have hacked a web site associated with the ABC television program Making Australia Happy, leakin...
Ascend D quad : World's fastest Android by Huawei
Ascend D quad : World's fastest Android by Huawei Huawei has introduced what it calls the world's fastest quad-core smartphone, the Huawei Ascend D quad. Powered by Huawei's K3V2 quad-core 1.2GHz/1.5GHz processor the beast comes with Android 4.0. In an aggressive presentation at the Mobile World...
Mark Russinovich on His Novel Zero Day and Coordinated Cyber Attacks
Dennis Fisher talks with Mark Russinovich of Microsoft about his novel Zero Day, the idea of a coordinated cyber attack by terrorists and the difficulty of writing a technical novel for a mainstream audience. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on Image...
More Privacy Controls Coming to Facebook
From The New York Times Riva Richmond Facebook launched a beta test today that foreshadows new privacy controls coming to “Publisher” – the box at the top of your home and profile pages where you add content. The changes will let you easily specify who among your friends gets to see that specific...
[Full-disclosure] Multiple vulnerabilities in phpMyVisites
Multiple vulnerabilities in phpMyVisites Application : phpMyVisites prior to 2.2 stable Release Date : 11 February 2007 Author : Nicob nicob at nicob.net Abstract : ========== Several vulnerabilities were identified in phpMyVisites. This software is "a free and powerful open source GNU/GPL softwa...
