83 matches found
Wedding Guest e-Book Cross-Site Scripting Vulnerability
Wedding Guest e-Book is a wedding guest e-book by rems individual developer. A cross-site scripting vulnerability exists in SourceCodester Wedding Guest e-Book version 1.0, which stems from a cross-site scripting XSS vulnerability in file /endpoint/add-guest.php...
MAL-2023-875 Malicious code in the-seven-husbands-of-evelyn-hugo-by-taylor-jenkins-reid-on-kindle-full-format- (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b996573435a17bafd3483e21096621cf64db349dc46ad984ae804d9c527e93f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
A Bootiful Podcast: Sonatype's Steve Poole and Gradle's Justin Reock on Improving Developer Productivity without compromising on things like security
Hi, Spring fans! Welcome to another installment of a Bootiful Podcast! In this installment, recorded at Devnexus in Atlanta, GA, I talk to newcomer to the show Steve Poole, from Sonatype, and Justin Reock, from Gradle, about improving developer productivity without comprising on things like...
Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web
Description There is a reflected XSS vulnerability on the site calibre-web. Proof of Concept 1. go to the calibre e-book management 2. create a new book give the title name 3. and give the title sort name 4. save and go to the website 5.go to Author 6.press one of the books 7. then right click an...
Libmobi Out-of-Bounds Read Vulnerability
Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. An out-of-bounds read vulnerability exists in Libmobi, which stems from the program being vulnerable to the use of out-of-range pointer offsets, and can be exploited by an attacker to read memory information...
libmobi buffer overflow vulnerability (CNVD-2022-18219)
Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. A buffer overflow vulnerability exists in Libmobi, which stems from the fact that libmobi is susceptible to out-of-range pointer offsets, which can be exploited by an attacker to read memory information beyond...
Libmobi Buffer Overflow Vulnerability
Libmobi is a C library for handling Mobipocket/Kindle MOBI e-book format documents. It is used to process Mobipocket/Kindle MOBI e-book format documents. libmobi is vulnerable to a buffer overflow vulnerability that could be exploited to read memory information beyond the size of the buffer...
New Amazon Kindle Bug Could've Let Attackers Hijack Your eBook Reader
Amazon earlier this April addressed a critical vulnerability in its Kindle e-book reader platform that could have been potentially exploited to take full control over a user's device, resulting in the theft of sensitive information by just deploying a malicious e-book. "By sending Kindle users a...
Amazon Kindle RCE Attack Starts with an Email
Three vulnerabilities in the Amazon Kindle e-reader would have allowed a remote attacker to execute code and run it as root – paving the way for siphoning money from unsuspecting users. Yogev Bar-On, researcher at Realmode Labs, found that it was possible to email malicious e-books to the devices...
Sharing eBook With Your Kindle Could Have Let Hackers Hijack Your Account
Amazon has addressed a number of flaws in its Kindle e-reader platform that could have allowed an attacker to take control of victims' devices by simply sending them a malicious e-book. Dubbed "KindleDrip," the exploit chain takes advantage of a feature called "Send to Kindle" to send a...
CISO with a small security team? Learn from your peers' experience with this free e-book
CISOs with small security teams hold an intensive juggling act. They're responsible for sustaining the company's security resilience, ensuring compliance is adhered to and implementing privacy controls. In between these tasks, they need to follow up on board updates, lead cross-team communication...
Cybercriminals impersonate World Health Organization to distribute fake coronavirus e-book
The number of scams, threats, and malware campaigns taking advantage of public concern over the coronavirus is increasing each day. As a result, we've been actively monitoring emails within our spam honeypot to flag such threats and make sure our users are protected. Yesterday, we observed a...
Get security beyond Microsoft products with Microsoft 365
Over time, organizations and individuals acquire stuff. Things we love and things we need. Things we don’t need but can’t seem to get rid of. I was confronted with this challenge when we bought a 1908 craftsman home. How could I make my beloved modern furniture and mandatory kid-friendly gear wor...
Debian DSA-4334-1 : mupdf - security update
Multiple vulnerabilities were discovered in MuPDF, a PDF, XPS, and e-book viewer which could result in denial of service or the execution of arbitrary code if malformed documents are opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...
Three of My Books Are Available in DRM-Free E-Book Format
Humble Bundle sells groups of e-books at ridiculously low prices, DRM free. This month, the bundles are all Wiley titles, including three of my books: Applied Cryptography, Secrets and Lies, and Cryptography Engineering. $15 gets you everything, and they're all DRM-free. Even better, a portion of...
Debian DSA-4152-1 : mupdf - security update
Two vulnerabilities were discovered in MuPDF, a PDF, XPS, and e-book viewer, which may result in denial of service or remote code execution. An attacker can craft a PDF document which, when opened in the victim host, might consume vast amounts of memory, crash the program, or, in some cases,...
indianrailways.gov.in XSS vulnerability
Vulnerable URL: http://www.indianrailways.gov.in/9E-book/E-book-03/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS...
Code injection
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
