Cisco Unity Connection File Upload Denial of Service Vulnerability

A vulnerability in the Bulk Administration Tool BAT for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability exists because the affected software does not restrict the maximum size of...

ThreatList: Spam’s Revival is Tied to Adobe Flash’s Demise

Spam click-rates are up in 2018. Last year, 13.4 percent of spam messages that made it into inboxes were clicked on. So far, in 2018 that percentage has jumped to 14.2 percent. The numbers come from F-Secure, which reported Wednesday on the sorry state of users’ better judgment when it comes to...

How to Customize NetScaler SD-WAN Virtual Path Traffic Classes

This article describes how to to modify the traffic classes that are part of NetScaler SD-WAN Virtual Path. Background Citrix SD-WAN Standard & Enterprise Editionsprovides 17 classes 0-16. Classes 0-3 are predefined for Citrix HDX QoS prioritization. To use this feature, enable the following...

Barracuda Cloud ESS 2.x - Multiple XSS Web Vulnerabilities

Document Title: =============== Barracuda Cloud ESS 2.x - Multiple XSS Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=742 Barracuda Networks Security ID: BNSEC-671 Release Date: ============= 2018-07-22 Vulnerability Laboratory ID...

Camelishing - Social Engineering Tool

Camelishing Social Engineering Tool Features 1. Bulk email sending 2. Basic Python Agent Creator 3. Office Excel Macro Creator 4. DDE Excel Creatoror Custom Payload 5. Return İnformation Mail Open Track Agent Open Track 6. AutoSave 7. Statistics Report 8. User Control Installation Modules $ pip...

Unspecified Vulnerability in Oracle Retail Applications Retail Bulk Data Integration Component

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. Retail Bulk Data Integration is one of the data integration components. A security vulnerability exists in the BDI Job Scheduler subcomponent of the Retail Bulk Data Integration...

CVE-2018-2891

Vulnerability in the Oracle Retail Bulk Data Integration component of Oracle Retail Applications subcomponent: BDI Job Scheduler. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reta...

CVE-2018-2891

Vulnerability in the Oracle Retail Bulk Data Integration component of Oracle Retail Applications subcomponent: BDI Job Scheduler. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reta...

CVE-2018-2891

CVE-2018-2891 affects Oracle Retail Bulk Data Integration (BDI Job Scheduler) in Oracle Retail Applications version 16.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise BDI, with user interaction required, potentially resulting in unauthorized read...

Wordpress Simple 301 Redirects Addon Bulk CSV Uploader Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress Simple 301 Redirects Addon Bulk CSV Uploader plugin, which can b...

DRUPAL-CONTRIB-2018-040

This module enables you to delete any types of entities in bulk. The module doesn't sufficiently verify access permissions under its use cases, leading to access bypass. The module also does not protect against Cross Site Request Forgeries on its delete process. The access bypass vulnerability is...

An Android App for RFID Card Cloning: Project Walrus

Walrus is an Android app that simplifies using several existing contactless card cloning devices during red team engagements and physical security assessments. It offers a common interface and database for storing cloned cards. Currently, Walrus supports the industry standard Proxmark 3, Chameleo...

Override access vulnerability in Spike's web version

Nail is a free multi-end platform for communication and collaboration created by Alibaba Group specifically for Chinese enterprises. Nail web version of the existence of bulk user override access vulnerability, an attacker can exploit the vulnerability bulk traversal of hundreds of millions of ui...

Sendroid < 6.5.0 - SQL Injection Exploit

Exploit for php platform in category web applications Exploit Title: Sendroid - Bulk SMS Portal, Marketing Script 5.0.0 - 6.5.0 - SQL Injection Google Dork: "welcome to SMS portal" Date: 22/12/2017 Exploit Author: Onwuka Gideon Contact: http://twitter.com/@gideononwuka Vendor Homepage:...

Sendroid < 6.5.0 - SQL Injection

Exploit Title: Sendroid - Bulk SMS Portal, Marketing Script 5.0.0 - 6.5.0 - SQL Injection Google Dork: "welcome to SMS portal" Date: 22/12/2017 Exploit Author: Onwuka Gideon Contact: http://twitter.com/@gideononwuka Vendor Homepage: http://ynetinteractive.com/ Software Buy:...

Sendroid Bulk SMS Portal / Marketing Script 6.5.0 SQL Injection

Exploit Title: Sendroid - Bulk SMS Portal, Marketing Script 5.0.0 - 6.5.0 - SQL Injection Google Dork: "welcome to SMS portal" Date: 22/12/2017 Exploit Author: Onwuka Gideon Contact: http://twitter.com/@gideononwuka Vendor Homepage: http://ynetinteractive.com/ Software Buy:...

Butler Smart App for Android is vulnerable to malicious bulk registrations

The Butler Smart App is a mobile application that goes along with the smart cat eye device. A malicious bulk registration vulnerability exists in Butler Smart APP for Android. An attacker can exploit the vulnerability to register accounts in bulk, leading to account abuse and consumption of servi...

HEYI Intelligent Alarm System Android APP has malicious bulk registration vulnerability

HEYI Smart Alarm System Android APP is a smart alarm APP that integrates security class monitoring, firmware upgrade, smart extension and so on. HEYI Smart Alarm System Android APP has a malicious bulk registration vulnerability, attackers can bulk register accounts by grabbing packet data to...

Text messages and the Bitcoin Code: follow the money trail

I was a bit surprised to receive lots of messages similar to the one below this past week: I mean, we've all done it—managed a bulk text spam campaign offering free Bitcoins in your spare time, while completely forgetting said business exists. Maybe I did it in my sleep? It's all gone a bit Fight...

Malicious Bulk Registration Vulnerability in Bodivis Android APP of Tongfang Co.

The bodivis Android App is a healthy life management app for use with the bodivis Health Scale and Exercise Bracelet. There is a malicious bulk registration vulnerability in the bodivis Android APP of Tongfang Co. Attackers can bypass the authentication code and register accounts in bulk by...