toptravelfind.com XSS vulnerability

Open Bug Bounty ID: OBB-651072 Description| Value ---|--- Affected Website:| toptravelfind.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

BlueHat IL 2017 Announced

Microsoft is thrilled to announce BlueHat IL 2017. This will mark the first time BlueHat is held in Tel Aviv and it will take place on January 24-25, 2017. Given its location, Israel further serves as a harness which draws in researchers from across Europe, Asia and the Middle East...

Vulnerability in OpenSSL - Side channel attack on modular exponentiation

A side-channel attack was found which makes use of cache-bank conflicts on the Intel Sandy-Bridge microarchitecture which could lead to the recovery of RSA keys. The ability to exploit this issue is limited as it relies on an attacker who has control of code in a thread running on the same...

How to Hack into Computers using Pita Bread and A Radio

There's a new and clever way of hacking into computers, and it can be done cheaply – Using just a radio receiver and a piece of pita bread. Yeah, you heard it right. Security researchers at Tel Aviv University have demonstrated how to extract secret decryption keys from computers by capturing rad...

DLA-190-1 libgcrypt11 - security update

Bulletin has no description...

Debian DSA-3185-1 : libgcrypt11 - security update

Multiple vulnerabilities were discovered in libgcrypt : - CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite noticeable impact on...

Debian Security Advisory DSA 3185-1 (libgcrypt11 - security update)

Multiple vulnerabilities were discovered in libgcrypt: CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite noticeable impact on...

Debian Security Advisory DSA 3184-1 (gnupg - security update)

Multiple vulnerabilities were discovered in GnuPG, the GNU Privacy Guard: CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite...

CVE-2014-6738

The Maccabi Tel Aviv aka com.monkeytech.maccabi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Maccabi Tel Aviv aka com.monkeytech.maccabi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6738

The Maccabi Tel Aviv aka com.monkeytech.maccabi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6738

The CVE-2014-6738 entry concerns the Maccabi Tel Aviv Android app (com.monkeytech.maccabi) version 1.0, which does not verify X.509 certificates when communicating with SSL servers. The root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and access ...

Mozilla Firefox <= 1.04 compareTo() Remote Code Execution Exploit

No description provided by source. html head !-- Copyright C 2005-2006 Aviv Raff From: http://aviv.raffon.net/2005/12/11/MozillaUnderestimateVulnerabilityYetAgainPlusOldVulnerabilityNewExploit.aspx Greets: SkyLined, The Insider and shutdown -- titleMozilla Firefox=v1.04 InstallVersion-compareTo...

Mobile Charger That Can Power-Up Your Smartphone in 30 Seconds

Going for a meeting or for a party and your Phone's battery discharged? Oops! Yes, I know this happens with most of us once in a day or I can rather say all of us. Smartphones are smart enough but not that smarter as expected keeping in mind today’s lifestyle. Phones are the basic necessity...

Israel preparing their Cyber Army under Unit 8200

The Israeli military has set plans to boost its cyber warfare capabilities with a better Cyber Army by expand its Unit 8200. "It has become clear that the demand for soldiers in this field is growing, which is why we're searching for solutions not only in Israel but abroad as well," a top officer...

Kevin Mitnick joins the Zimperium team

Security firm Zimperium developer of Android app zANTI Android application Toolkit now have World Best Hacker "Kevin Mitnick" in their Team. In a Press Release ,Itzhak "Zuk" Avraham said "Zimperium is honored and excited to announce our newest member of the advisory board, world renowned hacker...

Mozilla Suite/Firefox - InstallVersion->compareTo() Code Execution (Metasploit)

$Id: mozillacompareto.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Mozilla Firefox Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting

Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting source: https://www.securityfocus.com/bid/31991/info Opera Web Browser is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

Technical Details of Security Issues Regarding Safari for Windows

The first issue is the one described in Microsoft Security Advisory 953818. It's worked out by Aviv Raff: http://www.microsoft.com/technet/security/advisory/953818.mspx http://aviv.raffon.net/2008/05/31/SafariPwnsInternetExplorer.aspx It's covered by news but Aviv Raff has not published technical...