Деанонимизация пользователей Darknet(TOR, i2p(d), etc) & SOX &VPN аудиозакладками

Вообщем то ссылка на 33с3 уже была запощена в основном топике, но я хотел бы акцентировать общее внимание на презентацию Talking Behind Your Back On the Privacy & Security of the Ultrasound Tracking Ecosystem от Vasilios Mavroudis и Federico Maggi. Вкратце, суть такова: В 2012 году была основана...

branchenbuch20.de XSS vulnerability

Vulnerable URL: https://www.branchenbuch20.de/?suchwort=test%22%3E%3Cimg+src%3Dx+onerror%3Dalert%28%27OPENBUGBOUNTY%27%29%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7665716...

lotto24.de XSS vulnerability

Vulnerable URL: https://www.lotto24.de/webshop/product/fernsehlotterie/;jsessionid=81677CA74ADEDAAE2FAB87ABB489DCC9.wd-02-110103/x" Details: Description| Value ---|--- Patched:| Yes, at 24.01.2017 Latest check for patch:| 24.01.2017 11:34 GMT Vulnerability type:| XSS Vulnerability status:| Public...

e-recht24.de XSS vulnerability

Vulnerable URL: https://www.e-recht24.de/modules/modwiderrufcheck/search.php?wcid=251=" Details: Description| Value ---|--- Patched:| Yes, at 19.01.2017 Latest check for patch:| 19.01.2017 06:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 60334 VIP website...

procheck24.de XSS vulnerability

Open Bug Bounty ID: OBB-197802 Description| Value ---|--- Affected Website:| procheck24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Alpha Version of Sandboxed Tor Browser Released

A sandboxed version of the Tor Browser was released over the weekend, and while there are still some rough edges and bugs – potentially major, according to the developer– it could be the first step toward protecting Tor users from recent de-anonymization exploits. Yawning Angel, a longtime Tor...

D-Link DI-524 - Cross-Site Request Forgery

Title: D-Link DI-524 - Cross-Site-Request-Forgery Vulnerability Credit: Felipe Soares de Souza Date: 09/12/2016 Vendor: D-Link Product: D-Link DI-524 Wireless 150 Product link: https://dlink.com.br/produto/di-524150 Version: Firmware 9.01 1- Reboot the device CSRF - Reboot the device 2- Change...

Mozilla Patches Firefox Zero Day Used to Unmask Tor Browser Users

As expected, Mozilla released a new version of Firefox on Wednesday to address a zero-day vulnerability that was actively being exploited to de-anonymize Tor Browser users. The vulnerability, disclosed on a public Tor Project mailing list late Tuesday night, forced the Tor Project to also issue a...

Tor Patched Against Zero Day Under Attack

Update The Tor Project has provided a browser update that patches a zero-day vulnerability being exploited in the wild to de-anonymize Tor users. “The security flaw responsible for this urgent release is already actively exploited on Windows systems. Even though there is currently, to the best of...

Linux Kernel 2.6.18 move_pages() Information Leak Exploit

Linux kernel version 2.6.18 suffers from a movepages information leak vulnerability. / sieve because the Linux kernel leaks like one, get it? Bug NOT discovered by Marcus Meissner of SuSE security This bug was discovered by Ramon de Carvalho Valle in September of 2009 The bug was found via fuzzin...

Linux Kernel 2.6.18 move_pages() Information Leak

/ sieve because the Linux kernel leaks like one, get it? Bug NOT discovered by Marcus Meissner of SuSE security This bug was discovered by Ramon de Carvalho Valle in September of 2009 The bug was found via fuzzing, and on Sept 24th I was sent a POC DoS for the bug but had forgotten about it until...

maisons-de-retraite.fr XSS vulnerability

Vulnerable URL: http://www.maisons-de-retraite.fr/content/search?SubTreeArray%5B%5D=21368%5B%5D=247=%22%3E+%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status...

homepagebaukasten.1und1.de Open Redirect vulnerability

Vulnerable URL: https://homepagebaukasten.1und1.de/xml/deref?link=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 12.06.2017 Latest check for patch:| 12.06.2017 14:20 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

newslettertool2.1und1.de Open Redirect vulnerability

Vulnerable URL: https://newslettertool2.1und1.de/subscriber-frontend/link-tracking?target=https://www.openbugbounty.org/=b678403f-9668-49e5-a8a8-ab3b54136863=02f76a3c-361e-4b03-a416-e74cb37ae4ac Details: Description| Value ---|--- Patched:| Yes, at 30.06.2017 Latest check for patch:| 30.06.2017...

klarmobil.anschluss-bestellen24.de XSS vulnerability

Vulnerable URL: http://klarmobil.anschluss-bestellen24.de/?city=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Banco de Bogotá - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Banco de Bogotá published at the 'play' market has multiple vulnerabilities...

de-pro.co.jp XSS vulnerability

Vulnerable URL: http://www.de-pro.co.jp/twitter.php?callback=prompt/OPENBUGBOUNTY/...

offre-de-formations.univ-lyon1.fr XSS vulnerability

Vulnerable URL: http://offre-de-formations.univ-lyon1.fr/frontrecherche.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

ecotourisme.gites-de-france.com XSS vulnerability

Vulnerable URL: https://ecotourisme.gites-de-france.com/liste.html?lieucgi=' Details: Description| Value ---|--- Patched:| Yes, at 07.01.2017 Latest check for patch:| 07.01.2017 11:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

oenotourisme.gites-de-france.com XSS vulnerability

Vulnerable URL: http://oenotourisme.gites-de-france.com/liste.html?lieucgi=' Details: Description| Value ---|--- Patched:| Yes, at 07.01.2017 Latest check for patch:| 07.01.2017 11:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...