619 matches found
ShadowBrokers Releases NSA UNITEDRAKE Manual
The ShadowBrokers released the manual for UNITEDRAKE, a sophisticated NSA Trojan that targets Windows machines: Able to compromise Windows PCs running on XP, Windows Server 2003 and 2008, Vista, Windows 7 SP 1 and below, as well as Windows 8 and Windows Server 2012, the attack tool acts as a...
Fraudulent Donations Lead to Disbanding of Hutchins Legal Defense Fund
A legal defense fund established to ease Marcus Hutchins’ attorney costs has been disbanded after a sizable number of fraudulent donations were discovered. Hutchins, known as Malware Tech, is facing six counts for his alleged involvement in creating and distributing the Kronos banking malware. Th...
Artificial Inteligent Packet Inspection Engine: AIEngine
AIEngine is a next generation interactive/programmable Python/Ruby/Java packet inspection engine with capabilities of learning without any human intervention, NIDS Network Intrusion Detection System functionality, DNS domain classification, network collector, network forensics and many others...
NSA Links WannaCry to North Korea
There's evidence: Though the assessment is not conclusive, the preponderance of the evidence points to Pyongyang. It includes the range of computer Internet protocol addresses in China historically used by the RGB, and the assessment is consistent with intelligence gathered recently by other...
Cross-site Scripting (XSS)
Moodle is vulnerable to cross-site scripting XSS attacks. Registered users can use the submission of evidence of prior learning to submit XSS code. This code will then be executed on other users that try to edit that evidence...
Did North Korea Write WannaCry?
The New York Times is reporting that evidence is pointing to North Korea as the author of the WannaCry ransomware. Note that there is no proof at this time, although it would not surprise me if the NSA knows the origins of this malware attack...
purplepandalabs.com XSS vulnerability
Vulnerable URL: https://purplepandalabs.com/search/?Keyword=%3E%27%3E%22%3Es%3Ci%3Ei%3Cimg+src%3Dx+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 21:27 GMT Vulnerability type:| XSS Vulnerability...
Dashlane: [https://www.dashlane.com] Test Panel Disclosure
Greetings, On https://www.dashlane.com/ , I observed that the server discloses test panel at : https://www.dashlane.com/app/tests/ F183690 I found no relation between an account and the following page to do unauthorized tests. The following tests are available with no credential : == -...
Fitbit Evidence Used in Murder Investigation
Fitbit evidence is cited in an arrest warrant, stating that the device monitored steps by the victim after the suspect claimed she died...
Design/Logic Flaw
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...
CVE-2017-2644
In Moodle 3.x, XSS can occur via evidence of prior learning...
CVE-2017-2645
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...
CVE-2017-2645
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...
CVE-2017-2644
In Moodle 3.x, XSS can occur via evidence of prior learning...
CVE-2017-2645
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...
CVE-2017-2644
In Moodle 3.x, XSS can occur via evidence of prior learning...
CVE-2017-2644
In Moodle 3.x, XSS can occur via evidence of prior learning...
CVE-2017-2645
CVE-2017-2645 describes an XSS vulnerability in Moodle 3.x, triggerable through attachments to evidence of prior learning. The entry specifies a cross-site scripting flaw with a CVSS base score of 4.3 (NVD CVSS2) and 6.1 (CVSS3), indicating network access, no authentication, and user interaction ...
CVE-2017-2644
CVE-2017-2644 affects Moodle 3.x and enables cross-site scripting via evidence of prior learning. It is a network‑based XSS with no authentication, requiring user interaction per CVSS, and results in partial integrity impact and low confidentiality impact. Public details indicate multiple advisor...
