PayPal Inc BB #96 - Persistent Tags Vulnerability

Document Title: =============== PayPal Inc BB 96 - Persistent Tags Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=954 PayPal Security UID: apf87gW Release Date: ============= 2014-10-08 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #53 - Multiple Persistent Vulnerabilities

Document Title: =============== PayPal Inc BB 53 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=835 Release Date: ============= 2014-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 835...

PayPal Inc #86 iOS 4.6 - Validation & Design Vulnerability

Document Title: =============== PayPal Inc 86 iOS 4.6 - Validation & Design Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=915 PayPal Security UID: eff8aq Release Date: ============= 2014-09-29 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #70 FR - Persistent Mail Vulnerability

Document Title: =============== PayPal Inc BB 70 FR - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=869 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-25 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #71 PPM - Persistent Filter Vulnerability

Document Title: =============== PayPal Inc BB 71 PPM - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=870 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-24 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #59 - Persistent Mail Encoding Vulnerability

Document Title: =============== PayPal Inc BB 59 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=844 PayPal Security UID: CabdfGa Release Date: ============= 2014-09-23 Vulnerability Laboratory ID VL-ID:...

Congress Urged to Update ECPA with Email Privacy Protection

A coalition of digital rights groups and electronic privacy advocates are urging both houses of Congress to consider updating the Electronic Privacy Act of 1986 ECPA, which they claim is an archaic law exploited by the government to obtain the contents of emails without first obtaining a probable...

某通用型电子采购平台SQL注射（涉及大量企业）

简要描述： sql注入，应该没重复吧 详细说明： 之前大牛提交过，其他的还没搜到 WooYun: 某通用型电子采购平台SQL注射（涉及大量企业） google:inurl:custom/CompanyCGList.aspx?ComId= 目测为一采通电子采购平台，所属：北京网达信联科技发展有限公司 百度百科介绍：http://baike.baidu.com/view/5293437.htm?fr=aladdin 涉及大量企业 其中ComId参数存在注入 http://eps.alnan.com.cn/custom/CompanyCGList.aspx?ComId=1...

End-to-End Encryption for Yahoo Mail Coming Next Year

Today at Black Hat 2014 hacking conference, Yahoo! Chief Information Security Officer Alex Stamos announced that the company will start giving its consumers the option of end-to-end encryption in its Mail service by next year. Google showed off a PGP-based encryption plugin for Gmail back in June...

Legal Line Between Security Research, Cybercrime Murky

LAS VEGAS — In his keynote address at Black Hat Wednesday, Dan Geer, the CISO of In-Q-Tel and a respected security luminary noted that the industry has never been closer to the forefront of corporate and government policy decision making. Despite this, security research remains a dangerous busine...

Twitter Gains Team From Mitro Password Management Company

Twitter has announced that a cloud-based password management company called Mitro has joined the Twitter team, and all of Mitro’s code is now free and open source. Mitro’s offering a secure password manager that’s meant to help distributed teams share passwords for accounts and services. The...

某通用型电子采购平台存在任意文件上传漏洞GETSHELL

简要描述： 详细说明： 1.看看前人提交的漏洞： WooYun: 某通用型电子采购平台SQL注射（涉及大量企业） ,说的是注入漏洞，后来仔细研究发现存在一个编辑器存在任意文件上传可导致批量Getshell，影响危害极大。 厂商： http://www.ng.com/ 北京网达信联科技发展有限公司 关键字（构造的不是很好）： 2.Getshell漏洞。 /ftb.imy.aspx 可以直接上传asp文件 漏洞证明： 【声明以下案例仅供CNCERT、CNVD复现测，其它人不得利用或使用其恶意破坏，否则后果自负！】 3.案例测试：...

DNI, Justice Department Deny Targeting Americans for Surveillance Based on Religion, Politics

The Director of National Intelligence and the Department of Justice have denied a report based on leaked documents from Edward Snowden that United States intelligence and law enforcement agencies conduct surveillance of Americans based on their ethnicity, religious affiliation or political stance...

Paypal BBP #108 MOS - Persistent Web Vulnerability

Document Title: =============== Paypal BBP 108 MOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Release Date: ============= 2014-07-07 Vulnerability Laboratory ID VL-ID:...

EFF Sues NSA, ODNI Over Zero-Day Disclosure Processes

The Electronic Frontier Foundation wants a peek behind the curtain of the government’s Vulnerabilities Equities Process. The advocacy group on Tuesday filed a Freedom of Information Act FOIA lawsuit against the National Security Agency and the Office of the Director of National Intelligence hopin...

ABBS Electronic Flashcards 2.1 - Buffer Overflow Exploit (MSF)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

ABBS Electronic Flash Cards 2.1 .fcd Buffer Overflow Exploit

No description provided by source. Exploit Title: ABBS Electronic Flash Cards Buffer Overflow Exploit Software Link: http://abbs.qsnx.net/downloads/abbs-flashcards.zip Version: 2.1 triggering details : open the app, go to test, click on random, and start test, then chose the fcd file, and booom...

OpenEMR 4.1.1 (ofc_upload_image.php) Arbitrary File Upload Vulnerability

No description provided by source. ??php / OpenEMR 4.1.1 ofcuploadimage.php Arbitrary File Upload Vulnerability Vendor: OpenEMR Product web page: http://www.open-emr.org Affected version: 4.1.1 Summary: OpenEMR is a Free and Open Source electronic health records and medical practice management...

iCat Electronic Commerce Suite 3.0 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2126/info iCat Electronic Commerce Suite is an application which enables a user to create and manage web based catalogues. A remote user may retrieve known files on a target system running iCat Electronic Commerce Suite...

Nokia Electronic Documentation 5.0 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8626/info Nokia Electronic Documentation NED has been reported prone to a cross-site scripting vulnerability. The issue has been conjectured to present itself due to a lack of sufficient sanitization performed on user...