HackerOne: Email changing

Hello When someone chnage his email he doesn't have to confirm the change of the email from both emails I suggest you must use a confirmation from both emails specially the old email Because If an attacker compromises the password of a hackone user the user will not be able to reset his password...

Sony PC Companion 2.1 (DownloadURLToFile()) Stack-based Unicode Buffer Overflow

No description provided by source. Sony PC Companion 2.1 DownloadURLToFile Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: P...

Help Center Live 1.0/1.2.x Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13666/info Help Center Live is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Reportedly the application is affected by...

phpList 2.10.17 Remote SQL Injection and XSS Vulnerability

No description provided by source. phpList 2.10.17 Remote SQL Injection and XSS Vulnerability Vendor: phpList Ltd Product web page: http://www.phplist.com Affected version: 2.10.17 Summary: phplist is the world's most popular open source email campaign manager. phplist is free to download, instal...

Siemens S55 Cellular Telephone SMS Confirmation Message Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10227/info Reportedly the Siemens S55 is affected by an SMS confirmation message bypass vulnerability. This issue is due to a race condition error that allows a malicious programmer to send SMS messages from unsuspecting...

ZipTorrent <= 1.3.7.3 - Local Proxy Password Disclosure Exploit

No description provided by source. /================================================================ ZipTorrent 1.3.7.3 Local Proxy Password Disclosure Exploit by Kozan Discovered & Coded by Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Application:...

SquirrelMail 1.2.11 Remote Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/7952/info Multiple vulnerabilities have been reported for Squirrelmail which could allow for information disclosure, data corruption, and privilege escalation. The problems appear to occur due to insufficient sanitization...

Barracuda SSL VPN 680Vx 2.3.3.193 - Multiple Script Injection Vulnerabilities

No description provided by source. ? Barracuda SSL VPN 680Vx 2.3.3.193 Multiple Script Injection Vulnerabilities Vendor: Barracuda Networks, Inc. Product web page: https://www.barracuda.com Affected version: 2.3.3.193, Model: V680 Summary: The Barracuda SSL VPN is a powerful plug-and-play applian...

Threat Outbreak Alert RuleID10487: Email Messages Distributing Malicious Software on June 30, 2014

Medium Alert ID: 34786 First Published: 2014 June 30 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10487 may contain the following files: Name | Siz...

XSSYA - Cross Site Scripting Scanner & Vulnerability Confirmation

XSSYA work by execute the payload encoded to bypass Web Application Firewall which is the first method request and response if it respond 200 it turn to Method 2 which search that payload decoded in web page HTML code if it confirmed get the last step which is execute document.cookie to get the...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on May 22, 2014

Medium Alert ID: 34336 First Published: 2014 May 22 13:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Bank Account Credit Deposit Confirmation Email Messages on May 19, 2014

Medium Alert ID: 34285 First Published: 2014 May 20 13:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account funds transfer confirmation notice for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Information Confirmation Request Email Messages on May 16, 2014

Medium Alert ID: 34257 First Published: 2014 May 16 13:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an information confirmation notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on April 28, 2014

Medium Alert ID: 33962 First Published: 2014 April 28 15:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment slip for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on April 22, 2014

Medium Alert ID: 33885 First Published: 2014 April 22 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Tax Return Confirmation Notice Email Messages on April 14, 2014

Medium Alert ID: 33794 First Published: 2014 April 14 20:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax return confirmation notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Order Confirmation Email Messages on April 14, 2014

Medium Alert ID: 33788 First Published: 2014 April 14 20:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order confirmation notice for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Payment Confirmation Notice Email Messages on April 10, 2014

Medium Alert ID: 33753 First Published: 2014 April 10 18:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notice for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Confirmation Slip Document Delivery Email Messages on April 10, 2014

Medium Alert ID: 33738 First Published: 2014 April 10 13:31 GMT Last Updated: 2014 April 11 12:55 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a confirmation slip for the recipient. The text in the email message...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on April 8, 2014

Medium Alert ID: 33699 First Published: 2014 April 8 18:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to French-language spam email messages that claim to contain a payment confirmation for the recipient. The text in the email message attempts to convince the...