nederlandsoefenen.be XSS vulnerability

Open Bug Bounty ID: OBB-682223 Description| Value ---|--- Affected Website:| nederlandsoefenen.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

M-Trends 2018

What have incident responders observed and learned from cyber attacks in 2017? Just as in prior years, we have continued to see the cyber security threat landscape evolve. Over the past twelve months we have observed a number of new trends and changes to attacks, but we have also seen how certain...

Упражнения для глаз PRO *FREE - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Упражнения для глаз PRO FREE published at the 'play' market has multiple vulnerabilities...

maltran - Tool To Download Malware Exercises From MALware-TRaffic-ANalysis.net

This tool was developed with the purpose of furthering and organizing access to traffic analysis exercises and malware files captured and published almost daily. Maltran makes the views and downloads exercises and malspams easier in an extremely simple and organized way. Visit website...

prehabexercises.com XSS vulnerability

Vulnerable URL: http://www.prehabexercises.com/?s=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 140221...

Legs Workout and Exercises - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Legs Workout and Exercises published at the 'play' market has multiple vulnerabilities...

Butt Workouts Exercises - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Butt Workouts Exercises published at the 'play' market has multiple vulnerabilities...

U.S. and Japan to Cooperate on Cybersecurity, Information Sharing

The United States and Japan have agreed to cooperate more closely on cybersecurity and information sharing initiatives as a way to help both countries defend against future threats and attacks. The new initiative will include a variety of components, most notably cooperation during serious...

Dyre Wolf Banking Malware Stole More Than $1 Million

Security researchers have uncovered an active cyber attack campaign that has successfully stolen more than $1 Million from a variety of targeted enterprise organizations using spear phishing emails, malware and social engineering tricks. The campaign, dubbed "The Dyre Wolf" by researchers from...

Ryan McGeehan and Chad Greene

Ryan McGeehan, the director of incident response at Facebook and Chad Greene, the manager of the Facebook CERT on Thursday both explained how the social network has planned red team exercises in the past to prepare the company’s security team for a real attack...

Slideshow: Scenes from CanSecWest 2013

VIEW SLIDESHOW Scenes from CanSecWest 2013 The CanSecWest security conference in Vancouver last week included technical presentations on bypassing ASLR and DEP and the intricacies of Android research, as well as a fascinating talk on the red team exercises Facebook’s security team runs. We put...

Cyber Attack Management Tool: Armitage

Armitage is a graphical cyber attack management tool for Metasploit that visualizes your targets, recommends exploits, and exposes the advanced capabilities of the framework. Armitage aims to make Metasploit usable for security practitioners who understand hacking but don’t use Metasploit every...

SWSE - Most advanced Wi-Fi Hacking and Security Course online

SWSE - Most Advanced Wi-Fi Hacking and Security Course online We covered the launch of the SecurityTube Wi-Fi Security Expert in a previous article. As their entire courseware is available online free of charge to evaluate: , I took a look over the weekend and I was very impressed. The instructor...

CVE-2009-0394

SQL injection vulnerability in login.php in Pre Lecture Exercises PLEs CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter...

Claroline E-Learning 1.6 - Remote Hash SQL Injection (2)

!/usr/bin/perl Claroline E-Learning Application Remote SQL Exploit K-C0d3r This tools and to consider only himself to educational purpose Bug discovered by Greetz to mZ, 2b TUBE, off, rikky, str0ke, x0n3-h4ck, MWC K-C0d3r use IO::Socket; sub Usage print STDERR "Usage: KCcol-xpl.pl \n"; print STDE...

CVE-2005-1375

Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via 1 learningPath.php, 2 learningPathAdmin.php, 3 learnPathdetails.php, 4 modulespool.php, 5 module.php, 6 uInfo parameter in...