26 Android Phone Models Shipped with Pre-Installed Spyware

Bought a brand new Android Smartphone? Don't expect it to be a clean slate. A new report claims that some rogue retailers are selling brand-new Android smartphones loaded with pre-installed software. Security firm G Data has uncovered more than two dozens of Android smartphones from popular...

OpenText Secure MFT Cross-Site Scripting Vulnerability

OpenText Secure MFT is a secure file transfer management solution. A cross-site scripting vulnerability exists in OpenText Secure MFT userdashboard.jsp, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive...

IBM Domino Server Cross-Site Scripting Vulnerability (CNVD-2015-05520 )

The IBM Lotus Domino server is a WEB-based collaborative application architecture. A cross-site scripting vulnerability exists in IBM Domino Server, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information ...

Serialization vulnerability affects more than half of the Android phones-vulnerability warning-the black bar safety net

! Stagefright vulnerability broke not long before the Android platform and broke a major vulnerability, affect 5 5% of phone. IBM's X-Force application security research team has recently discovered this vulnerability. An attacker can exploit this arbitrary code execution vulnerability to a no...

WordPress Cross-Site Scripting Vulnerability (CNVD-2015-05156)

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

Black Hat BLEKey RFID Access Control Hack

LAS VEGAS – A device the size of a quarter that can be installed in 60 seconds on a proximity card reader could potentially be used to break physical access controls in 80 percent of deployments. The device, dubbed BLEKey, is used to read cleartext data sent from card readers to door controllers ...

This Antenna Can Remotely Steal Data From Devices using Sound Waves

Remember the previously demonstrated technique to Hack into air-gapped computers using Heat waves? What if the same was possible to hack computers to steal data using Sound waves? Imagine, If a remote hacker could steal classified information from a targeted computer without having to physically...

Operation Lotus Blossom APT - Elise Malware

Advanced Persistent Threat APT type attacks continue to emerge on a global scale. What makes these attacks deviate from the norm is often the resources required to develop and implement them: time, money, and the knowledge required to create custom pieces of malware to carry out specific, targete...

License Bypass Vulnerability in Riptide Networks NPE Network Egress Engine Highest Software Version

NPE 50 E is a specialized device developed by Ruijie Networks for domestic network egress. An authorization bypass vulnerability exists in the highest software version of the Ruijie Networks NPE Network Egress Engine, allowing attackers to exploit this vulnerability to obtain sensitive informatio...

How to Hack Millions of Android Phones Using Stagefright Bug, Without Sending MMS

Earlier this week, security researchers at Zimperium revealed a high-severity vulnerability in Android platforms that allowed a single multimedia text message to hack 950 Million Android smartphones and tablets. As explained in our previous article, the critical flaw resides in a core Android...

United Airlines Hacked by Sophisticated Hacking Group

A group of China-backed hackers believed to be responsible for high-profile data breaches, including the U.S. Office of Personnel Management and the insurance giant Anthem, has now hit another high-profile target – United Airlines. United detected a cyber attack into its computer systems in May o...

New Hammertoss Espionage Tool Tied to MiniDuke Gang

The espionage gang behind the MiniDuke backdoor uncovered by Kaspersky Lab and CrySys Lab in 2013 has surfaced again with a new backdoor and attack platform that is used sparingly against only high-value targets. The new data theft tool, called Hammertoss, is a study not only in espionage...

Hacking Air-Gapped Computer With A Simple Cell Phone

Wanna Hack an extremely secure Computer? You do not need sophisticated techniques or equipment to do so. To hack an Air-Gapped computer – All you need is a cell phone; even old-fashioned, dumb phones from the past decade will work. Yes, Hacking Air-Gapped Computers is possible using a basic low-e...

WordPress CP Contact Form with Paypal Plugin Scripting Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.CP Contact Form with Paypal is a support for adding Paypal commonly used contacts to the Worpress website plugin. WordPress CP Contact Form with Paypal...

Google Chrome Generic Cross-Site Scripting Vulnerability

Google Chrome is an open source WEB browser. A cross-site scripting vulnerability in Google Chrome org/chromium/chrome/browser/UrlUtilities.java on Android allows attackers to build malicious WEB pages that can be parsed by tricking a user into parsing them, which can obtain sensitive information...

WordPress Plotly Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server set up personal blog site . Plotly is one of the plugin to the Wordpress site embedded Plotly charts . An HTML injection vulnerability exists ...

Hacker Earns 1.25 Million Free Frequent Flyer Miles On United Airlines

What if you get 1 Million Frequent Flyer Miles for Free? Yes, 1 Million Air Miles… …I think that would be enough for several first-class trips to Europe or up to 20 round-trips in the United States. Two Computer Hackers have earned more than 1 Million frequent-flyer miles each from United Airline...

Multiple Cross-Site Scripting Vulnerabilities in Cisco FireSIGHT System Software

The Cisco FireSIGHT Management Center centrally manages the network security and operational functions of Cisco ASA and Cisco FirePOWER Network Security Appliances with FirePOWER Services. A cross-site scripting vulnerability exists in Cisco FireSIGHT, which allows remote attackers to exploit the...

ECE Projects 'tx_solr[q]' Parameter Cross-Site Scripting Vulnerability

ECE Projects is a project management application. ECE Projects handles a cross-site scripting vulnerability in the 'txsolrq' parameter, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or...

Affect tens of millions of APP the Android APP“parasitic beast”vulnerability technical analysis-vulnerability warning-the black bar safety net

3 6 0 mobile security research team vulpecker recently discovered a new Android app security vulnerabilities, the market tens of millions of apps are affected by the vulnerability. The vulnerability once attacker, it can be directly on the user's mobile phone implanted Trojans to steal the user's...