Apple iTunes Open Redirect Vulnerability

iTunes is a digital media playback application. Apple iTunes suffers from an open redirection vulnerability that can be exploited by an attacker to obtain encrypted SMB credentials...

CoreBot Adds New Capabilities, Transitions to Banking Trojan

As researchers expected it would, CoreBot, the credential-stealing malware that surfaced last month, has added a bevy of new capabilities and reinvented itself as a robust banking Trojan. Researchers said the malware shares more similarities with Dyre, another high profile banking Trojan, than a...

Apache ActiveMQ Java Authentication and Authorization Service Certificate Acquisition Vulnerability

Apache ActiveMQ is the United States Apache Apache Software Foundation developed a set of open source messaging middleware , which supports Java messaging services , clustering , Spring Framework and so on. Apache ActiveMQ 5.10.1 before version 5.x of the Java Authentication and Authorization...

CVE-2015-6524

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-361...

CVE-2015-6524

The LDAPLoginModule implementation in the Java Authentication and Authorization Service JAAS in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-361...

Nakid CMS HTML Injection Vulnerability

Nakid CMS is an open source content management system CMS based on PHP and CodeIgniter. Nakid CMS suffers from an HTML injection vulnerability that could be exploited to allow an attacker to execute supplied HTML and script code in the context of an affected browser, which could allow an attacker...

The vulnerability of the Windows operating system allows a malicious individual to obtain user authentication information.

The vulnerability of the Windows operating system exists in the implementation of system calls such as URLDownloadA, URLDownloadW, URLDownloadToCacheFileA, URLDownloadToCacheFileW, URLDownloadToFileA, URLDownloadToFileW, URLOpenStream, and URLOpenBlockingStream. During these calls, the operating...

WordPress Greg's High Performance SEO Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Greg's High Performance SEO plugin due to the program failing to properly filter user-supplied input. A...

Banking Malware Vawtrak Seen Using Tor2Web

Developers behind the banking Trojan Vawtrak have begun obscuring some of their servers with Tor2Web, a move that’s added another degree of difficulty when it comes to uncovering their activity. To this point the malware’s techniques – its evolution beyond banking websites, ability to break...

Ubuntu 14.04 LTS : strongSwan vulnerability (USN-2628-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2628-1 advisory. Alexander E. Patrakov discovered that strongSwan incorrectly handled certain IKEv2 setups. A malicious server could possibly use this issue to obtain user...

Phishers Going the Long Way Round to Avoid Filtering Systems

Any human with an email address likely has gotten thousands of spam messages that look like delivery notifications, invoices, or other alleged communications from shipping companies such as UPS or DHL. They typically contain malicious attachments with exploits for a browser or plug-in...

Android Factory Reset Improper Sanitization Exposes Data

The churn of Android devices, whether older smartphones being traded in or sold online, makes device sanitization imperative. The native feature in the OS, however, may not be doing as thorough a job as advertised. A paper, “Security Analysis of Android Factory Resets” pdf, published by Ross...

CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy

It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF...

CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy

It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF...

Command injection

FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag debug application httpd" command...

Drupal Profile2 Privacy Module Cross-Site Scripting Vulnerability

Drupal is a developmental CMF Content Management Framework written in the PHP language. A cross-site scripting vulnerability exists in the Drupal Profile2 Privacy module. Because the program fails to properly filter user-supplied text, an attacker can exploit the vulnerability to execute arbitrar...

Multiple cross-site scripting vulnerabilities in Drupal OG tabs module

Drupal is a developmental CMF Content Management Framework written in the PHP language. Multiple cross-site scripting vulnerabilities exist in the Drupal OG tabs module. Because the application fails to properly filter user-supplied input, an attacker could exploit the vulnerabilities to execute...

CrushFTP 7.2.0 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

CrushFTP version 7.2.0 suffers from cross site request forgery and cross site scripting vulnerabilities. ======================================================= I. Overview ======================================================== Multiple CSRF & Cross-Site Scripting XSS vulnerabilities have been...

Multiple Cross-Site Scripting Vulnerabilities in Saurus CMS

Saurus CMS is a content management system. Saurus CMS suffers from multiple cross-site scripting vulnerabilities due to the program failing to properly process user-supplied input. This allows attackers to exploit this vulnerability to steal cookie-based authentication credentials, execute...

Drupal Wishlist Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in the Drupal Wishlist module, which could be exploited by an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of an affected sit...