Web Reference Database Cross-Site Scripting Vulnerability

Web Reference Database is a web-based multi-user interface product that provides search tools and automatic indexing for managing scientific literature. Multiple scripts in Web Reference Database fail to adequately filter multiple parameters, allowing remote attackers to exploit vulnerabilities t...

WordPress Private Only plugin has multiple vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Private Only is one of the private content plugin. The WordPress Private Only plugin suffers from a cross-site scripting a...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution. A cross-site scripting vulnerability exists in IBM Maximo Asset Management, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to...

Winmail Server 'badlogin.php' Cross-Site Scripting Vulnerability

Winmail Server is a set of mail server software. A cross-site scripting vulnerability exists in Winmail Server badlogin.php, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user...

Exploiting Browser Cookies to Bypass HTTPS and Steal Private Information

A newly discovered critical flaw in the implementation of web cookies by major browsers could open secured HTTPS browsing to Man-in-the-middle attacks. The US Computer Emergency Response Team CERT has revealed that all the main browser vendors have improperly implemented the RFC 6265 Standard, al...

Warning! Popular Apple Store Apps Infected with Data-Theft Malware

Unlike Google Play Store, Apple App Store is well known for not allowing any malformed apps to enter its Apple ecosystem because of its tight security checks. But, not anymore. Hundreds of malicious apps managed to get hosted on Apple's official App store and subsequently downloaded by several...

Beware Coffee Lovers! StarBucks Exposed you to 3 Critical Vulnerabilities

Ever registered on StarBucks website? Change your passwords now! If you are one of those Millions Starbucks customers who have registered their accounts and credit card details on StarBucks website, then your banking details are vulnerable to hackers. An Independent Security Researcher, Mohamed M...

CoreBot Adds New Capabilities, Transitions to Banking Trojan

As researchers expected it would, CoreBot, the credential-stealing malware that surfaced last month, has added a bevy of new capabilities and reinvented itself as a robust banking Trojan. Researchers said the malware shares more similarities with Dyre, another high profile banking Trojan, than a...

Russian Hackers Hijack Satellite To Steal Data from Thousands of Hacked Computers

A group of Russian hackers, most notably the Turla APT Advanced Persistent Threat is hijacking commercial satellites to hide command-and-control operations, a security firm said today. Turla APT group, which was named after its notorious software Epic Turla, is abusing satellite-based Internet...

How to Remove KeyRaider Malware that Hacked Over 225,000 iOS Devices

Jailbreaking your device may have got you the best of apps but after reading this you will know what a high price you could have to pay for the jailbreak. Read on… A malware named ‘KeyRaider’ has supposedly stolen user credentials of approximately 225K iPhone users. It has been given this name as...

26 Android Phone Models Shipped with Pre-Installed Spyware

Bought a brand new Android Smartphone? Don't expect it to be a clean slate. A new report claims that some rogue retailers are selling brand-new Android smartphones loaded with pre-installed software. Security firm G Data has uncovered more than two dozens of Android smartphones from popular...

OpenText Secure MFT Cross-Site Scripting Vulnerability

OpenText Secure MFT is a secure file transfer management solution. A cross-site scripting vulnerability exists in OpenText Secure MFT userdashboard.jsp, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive...

IBM Domino Server Cross-Site Scripting Vulnerability (CNVD-2015-05520 )

The IBM Lotus Domino server is a WEB-based collaborative application architecture. A cross-site scripting vulnerability exists in IBM Domino Server, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information ...

Serialization vulnerability affects more than half of the Android phones-vulnerability warning-the black bar safety net

! Stagefright vulnerability broke not long before the Android platform and broke a major vulnerability, affect 5 5% of phone. IBM's X-Force application security research team has recently discovered this vulnerability. An attacker can exploit this arbitrary code execution vulnerability to a no...

WordPress Cross-Site Scripting Vulnerability (CNVD-2015-05156)

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

Black Hat BLEKey RFID Access Control Hack

LAS VEGAS – A device the size of a quarter that can be installed in 60 seconds on a proximity card reader could potentially be used to break physical access controls in 80 percent of deployments. The device, dubbed BLEKey, is used to read cleartext data sent from card readers to door controllers ...

This Antenna Can Remotely Steal Data From Devices using Sound Waves

Remember the previously demonstrated technique to Hack into air-gapped computers using Heat waves? What if the same was possible to hack computers to steal data using Sound waves? Imagine, If a remote hacker could steal classified information from a targeted computer without having to physically...

Operation Lotus Blossom APT - Elise Malware

Advanced Persistent Threat APT type attacks continue to emerge on a global scale. What makes these attacks deviate from the norm is often the resources required to develop and implement them: time, money, and the knowledge required to create custom pieces of malware to carry out specific, targete...

License Bypass Vulnerability in Riptide Networks NPE Network Egress Engine Highest Software Version

NPE 50 E is a specialized device developed by Ruijie Networks for domestic network egress. An authorization bypass vulnerability exists in the highest software version of the Ruijie Networks NPE Network Egress Engine, allowing attackers to exploit this vulnerability to obtain sensitive informatio...

How to Hack Millions of Android Phones Using Stagefright Bug, Without Sending MMS

Earlier this week, security researchers at Zimperium revealed a high-severity vulnerability in Android platforms that allowed a single multimedia text message to hack 950 Million Android smartphones and tablets. As explained in our previous article, the critical flaw resides in a core Android...