Moderate: Red Hat Security Advisory: rh-sso7-keycloak security update

An update for rh-sso7-keycloak is now available for Red Hat Single Sign-On 7.1 for RHEL 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

shib_auth Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2017-043

This module enables you to login via Shibboleth. The module doesn't sufficiently logout the user when the shib session expires, which depending on the caching mechanism makes private data public. This vulnerability is mitigated by the fact that shibauth would have to be used in combination with a...

RockLoader SQL Injection / Shell Upload

Exploit Title: RockLoader aka Bart Malware SQLi and shell file upload Date: 27-06-2016 Software Link Leak: https://github.com/colocation/RockLoader-source Exploit Author: Danail Velev Contact: ICQ: 209030 / [email protected] Website: http://colocation.bg/ Category: webapps / malware / private...

FCC to Investigate BART Wireless Blackout

The FCC is launching a probe into the August 11, 2011 decision by San Francisco’s Bay Area Rapid Transit BART to cut-off wireless communication services in their tunnels to disrupt planned protests. The investigation comes almost four months after BART operators used a wireless blackout to dampen...

#Anonymous Leaks Nude Pics of #BART Spokesman

Anonymous Leaks Nude Pics of BART Spokesman A member of Anonymous has set up a blog NSFW exposing BART spokesman Linton Johnson's, uh, Johnson. The blog shows a couple photos CAUTION: photos contain nudity of Johnson cavorting at an outdoor party, pulling down his pants and revealing his dong. Al...

#Anonymous Leaks Nude Pics of #BART Spokesman

Anonymous Leaks Nude Pics of BART Spokesman A member of Anonymous has set up a blog NSFW exposing BART spokesman Linton Johnson's, uh, Johnson. The blog shows a couple photos CAUTION: photos contain nudity of Johnson cavorting at an outdoor party, pulling down his pants and revealing his dong. Al...

#OpBart : BART Police database hacked by Anonymous

OpBart : BART Police database hacked by Anonymous A database belonging to the BART Police Officers Association appears to have been hacked by Anonymous Hackers and the names, postal and email addresses of officers posted online HERE. Some say it was Anonymous, some say it was a n00b mademoiselle...

#OpBart : BART Police database hacked by Anonymous

OpBart : BART Police database hacked by Anonymous A database belonging to the BART Police Officers Association appears to have been hacked by Anonymous Hackers and the names, postal and email addresses of officers posted online HERE. Some say it was Anonymous, some say it was a n00b mademoiselle...

Retaliating Against "Abuses" and "Exploits" Anonymous Breaches BART Site, Publishes User Data

In their latest effort, the online-collective Anonymous breached the Website of the San Francisco Bay Area Rapid Transit BART System. In a statement, BART claims to have suffered a compromise in which some 2,400 of their 55,000 members were affected. The leaked information includes names, email...

#OpBART and #Bart-Action : Anonymous hacks myBART, Leaks BART User Info

OpBART and Bart-Action : Anonymous hacks myBART, Leaks BART User Info In reaction to BART's shutdown of cell phone service Thursday, Anonymous has taken to the Internet and begun opBART and opMuBARTek a reference to the Egyptian president's shutting down that country's Internet service during...

#OpBART and #Bart-Action : Anonymous hacks myBART, Leaks BART User Info

OpBART and Bart-Action : Anonymous hacks myBART, Leaks BART User Info In reaction to BART's shutdown of cell phone service Thursday, Anonymous has taken to the Internet and begun opBART and opMuBARTek a reference to the Egyptian president's shutting down that country's Internet service during...

[Full-disclosure] Firefox/MSIE focus stealing vulnerability - clarification

After some research, I can offer this clarification: 1 The MSIE 7 attack vector I described is a distinctive, new vulnerability that differs from the attack reported by Charles McAuley and Bart van Arnhem. Attacks described by them were fixed in MSIE7 although MSIE6 is still exposed to the origin...

DRUPAL-SA-2006-008 XSS Vulnerability in taxonomy module

It is possible for a malicious user to insert and execute XSS into terms, due to lack of validation on output of the page title. The fix wraps the display of terms in checkplain. Versions affected - Drupal 4.6.x versions before Drupal 4.6.8. - Drupal 4.7.x versions before Drupal 4.7.2. Solution...