CVE-2020-12272

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the...

Propaganda and the Weakening of Trust in Government

On November 4, 2016, the hacker "Guccifer 2.0,: a front for Russia's military intelligence service, claimed in a blogpost that the Democrats were likely to use vulnerabilities to hack the presidential elections. On November 9, 2018, President Donald Trump started tweeting about the senatorial...

Iron Mind: Defending Against Propaganda & Counter Victimization

Thomas Jefferson had it right. Propaganda is the greatest threat to any democracy. Or did you just believe a quote that I made up with a picture of him to add credence to this blog? Iron Palm or Iron Hand is a body of training techniques in various martial arts. It is originally one of the 72 art...

Explained: SQL injection

Even though SQL injection is a type of attack that is relatively easy to prevent, it is one of the most common web hacking techniques. So, what’s it all about? The basics SQL is short for Structured Query Language and usually pronounced as “sequel.” SQL is a standard language used to query and...

Suspicious Site Containing Tech Scams

Many scams have emerged looking to steal money or information by giving users false information claiming that their computers are infected. After such claims they give the users a phone number to call or a way to pay to solve their issues. A successful attack can lead to stolen credentials or mon...

CVE-2017-2111

HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier,...

CVE-2017-2111

HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier,...

Design/Logic Flaw

HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier,...

CVE-2017-2111

CVE-2017-2111 describes an HTTP header injection vulnerability in specific I-O DATA network camera firmware. Affected products/versions include TS-WPTCAM (1.18 and earlier), TS-WPTCAM2 (1.00), TS-WLCE (1.18 and earlier), TS-WLC2 (1.18 and earlier), TS-WRLC (1.17 and earlier), TS-PTCAM (1.18 and e...

CVE-2016-3128

A spoofing vulnerability in the Core of BlackBerry Enterprise Server BES 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a devi...

Design/Logic Flaw

A spoofing vulnerability in the Core of BlackBerry Enterprise Server BES 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a devi...

CVE-2016-3128

A spoofing vulnerability in the Core of BlackBerry Enterprise Server BES 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a devi...

Mail.ru: Reflective Xss on news.mail.ru and admin.news.mail.ru

Hello folks I know this is out of scope for a bounty but I thought I'd report it anyway. The XSS appears in the date parameter and there are two examples below. https://news.mail.ru/currency.html?date=%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt%28document.domain,document.cookie%29%3C/script%3E...

Microsoft Internet Explorer 5.0.1 Mouse Event URI Status Bar Obfuscation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/12541/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue presents itself when a HREF tag contains certain mouse events. This issue may be leveraged by an attacker to display false...

Microsoft Internet Explorer 6.0 TABLE Status Bar URI Obfuscation Weakness

No description provided by source. source: http://www.securityfocus.com/bid/11561/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. This issue may be leveraged by an attacker to display false information in the status bar of an unsuspecting user, allowing an attack...

Mozilla Suite/Firefox/Thunderbird Nested Anchor Tag Status Bar Spoofing Weakness

No description provided by source. source: http://www.securityfocus.com/bid/12798/info Mozilla Suite/Firefox and Thunderbird are reported prone to a URI obfuscation weakness. The issue is reported to manifest when 'Save Link As...' functionality is invoked on an malicious anchor tag. This issue m...

International Organization For Migration database hacked by Inj3ct0r Team for GREEN LIBYA

International Organization For Migration database hacked by Inj3ct0r Team for GREEN LIBYA Inj3ct0r Team Hackers hack the database of International Organization For Migration database . Statement by Hacker "Sorry about the usernames and passwords not giving because we take no responsibility of...

FTC Charges Scareware Operators to Pay $8 Million Settlement

The FTC doled out $8 million in fines to the operators of an online scareware scheme. The scam involves tricking consumers into thinking their computers are infected with malware and then selling them software to remedy problems that doesn’t exist in the first place. A district court order in...

Microsoft Internet Explorer 6 - TABLE Status Bar URI Obfuscation

source: https://www.securityfocus.com/bid/11561/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. This issue may be leveraged by an attacker to display false information in the status bar of an unsuspecting user, allowing an attacker to present web pages to users...