CVE-2011-5319: Undefined Security Weakness

content/renderer/devicesensors/devicemotioneventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate accelerometer data, which makes it easier for remote attackers to capture keystrokes via a crafted web site that listens for ondevicemotion events, a differe...

Government Report Critical of FAA Security Controls

The Federal Aviation Administration has been put on notice that its information security controls are not up to par and that a risk-based program must be implemented from the ground up in order to assure the safety of its networks and passengers in the sky. A scathing Government Accounting Office...

PT-2015-4126

Name of the Vulnerable Software and Affected Versions IBM Notes Traveler Companion application versions 1.0 through 1.1 before 201411010515 Description The issue makes it easier for remote attackers to capture credentials by conducting a phishing attack involving an encrypted e-mail message, due ...

CVE-2014-8921: Exposure of Sensitive Information to an Unauthorized Actor

The IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as distributed in IBM Notes Traveler 9.0.1, does not properly restrict the number of executions of the automatic configuration option, which makes it easier for remote attackers to capture credentials b...

ESA-2015-012: EMC Captiva Capture Sensitive Information Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-012: EMC Captiva Capture Sensitive Information Disclosure Vulnerability EMC Identifier: EMC-2015-012 CVE Identifier: CVE-2015-0519 Severity Rating: CVSS v2 Base Score: 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C Affected products: • EMC Captiva Capture 7....

EMC Captiva Capture InputAccel Database Information Disclosure Vulnerability

EMC Captiva Capture is a suite of data capture software. The software captures documents and data from files, electronic documents and other sources and transforms them into digital content delivery with content management systems and business processes. A security vulnerability in the InputAccel...

Motorola Mobility Scanner SDK Local Elevation of Privilege Vulnerability

The Motorola Mobility Scanner SDK is a suite of applications from Motorola Mobility USA that provide support for capturing images. A local elevation of privilege vulnerability exists in the Motorola Mobility Scanner SDK, which can be exploited by a local attacker to elevate privileges and execute...

Design/Logic Flaw

The InputAccel Database IADB installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel IA SQL password in a DAL log file, which allows local users to obtain sensitive information by reading a file...

CVE-2015-0519

The InputAccel Database IADB installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel IA SQL password in a DAL log file, which allows local users to obtain sensitive information by reading a file...

CVE-2015-0519

The CVE-2015-0519 issue affects EMC Captiva Capture 7.0 (before patch 25) and 7.1 (before patch 13). During InputAccel Database (IADB) installation, a cleartext InputAccel (IA) SQL password may be written to a DAL log file, enabling local users to read sensitive credentials. Impact is defined as ...

PT-2015-4684

Name of the Vulnerable Software and Affected Versions EMC Captiva Capture versions 7.0 through 7.0 before patch 25 EMC Captiva Capture versions 7.1 through 7.1 before patch 13 Description The issue concerns the InputAccel Database installation process, which stores a cleartext InputAccel SQL...

CVE-2015-0519: Exposure of Sensitive Information to an Unauthorized Actor

The InputAccel Database IADB installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel IA SQL password in a DAL log file, which allows local users to obtain sensitive information by reading a file...

IBM Tivoli Endpoint Manager HTML Injection Vulnerability

IBM Tivoli Endpoint Manager provides a unified, real-time visualization and implementation approach to deploying and managing patches to all endpoints. IBM Tivoli Endpoint Manager failed to properly filter user-submitted input, allowing remote attackers to exploit vulnerabilities to inject...

openSUSE Security Update : vlc (openSUSE-SU-2015:0201-1)

vlc was updated to the current openSUSE Tumbleweed version. live555 was also updated to the current openSUSE Tumbleweed version as a dependency. Security issues fixed : - Fix various buffer overflows and null ptr dereferencing boo914268, CVE-2014-9625. Other fixes : - Enable SSE2 instruction set...

IP Thief - Simple IP Stealer in PHP

A simple PHP script to capture the IP address of anyone that send the "imagen.php" file with the following options: + It comes with an administrator to view and delete IP + You can change the redirect URL image + Can you see the country of the visitor Download IP Thief...

Upload pictures of the shell to bypass the filter of several methods-vulnerability warning-the black bar safety net

General site picture upload function to the file filter, to prevent webshell written. But the different procedures of the filter are not the same, how to break through the filter to continue to upload? This article summarizes seven methods that can break! 1, The file header+GIF89a law. （php//this...

Dshell – Network Forensic Analysis Framework

Dshell An extensible network forensic analysis framework. Enables rapid development of plugins to support the dissection of network packet captures. Key features: Robust stream reassembly IPv4 and IPv6 support Custom output handlers Chainable decoders Prerequisites Linux developed on Ubuntu 12.04...

SmartSniff v2.16 - Capture TCP/IP packets on your network adapter

SmartSniff is a network monitoring utility that allows you to capture TCP/IP packets that pass through your network adapter, and view the captured data as sequence of conversations between clients and servers. You can view the TCP/IP conversations in Ascii mode for text-based protocols, like HTTP...

Vimeo: CSRF bypass

Dear Team, Once again i'm here. During research of vimeo.com I found that you are using anti-csrf token against csrf attack. but it's not going to validate on server side. let's see Step 1: go to https://vimeo.com/forgotpassword Step 2: write your email and click on help me. Step 3: Now before...

Password Sniffer Console - Command-line Tool to Sniff and Capture HTTP/FTP/POP3/SMTP/IMAP Passwords

Password Sniffer Console is the all-in-one command-line based Password Sniffing Tool to capture Email, Web and FTP login passwords passing through the network. It automatically detects the login packets on network for various protocols and instantly decodes the passwords. Here is the list of...