998 matches found
Tenable University: Nessus Certificate of Proficiency
Yesterday I finished "Nessus Certificate of Proficiency" learning plan at Tenable University and passed the final test. Here I would like to share my impressions. First of all, few words about my motivation. I use Nessus literally every day at work. So, it was fun to check my knowledge. I already...
Mail.ru: XSS Š² ŃŠµŠ»Šµ ŠæŠøŃŃŠ¼Š°.
XSS via malcrafted HTML "rel" attribute. As a temporary workaround rel attribute was disabled on the day of reporting. A final solution fixes parsing algorithm for rel attributes...
finaldestinations.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-446027 Description| Value ---|--- Affected Website:| finaldestinations.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
Someone hacked N. Korean Radio Station to Play āThe Final Countdownā
By Waqas Its just another day with just another radio station transmission This is a post from HackRead.com Read the original post: Someone hacked N. Korean Radio Station to Play The Final Countdown...
Girls Who Code: That's a Wrap!
The Summer Immersion Program for Girls Who Code at Akamai wrapped up this past week. The girls finished their final projects and presented them at a graduation ceremony attended by friends and family as well as supporters and mentors from Akamai. The girls were divided into five teams for their...
Blizzard Entertainment Hit With Weekend DDoS Attack
Blizzard Entertainment reported a crippling DDoS attack over the weekend creating chronic latency and connection issues for players of games Overwatch, World of Warcraft and others. The DDoS attack has since subsided, according to Blizzard, but users are still grousing on Twitter over lingering...
Girls Who Code at Akamai, Week 5: Designing the User Experience!
Week 5 of the Girls Who Code program at Akamai was action-packed. The class attended a User-Experience UX workshop onsite at Akamai's headquarters in Cambridge, Mass. The instructors, formerly of Twitter and currently Google UX experts, led the girls through an activity in which they designed the...
CVE-2017-9860
An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network protocol to update the device firmware without ever having to authenticate. If an attacker is able to create a custom firmware version that is accepted by the inverter, the invert...
final-fantasy.ch XSS vulnerability
Vulnerable URL: https://www.final-fantasy.ch/search.php?q=%22%3E%27%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E=4=6 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...
VulnCheck KEV: CVE-2003-0681
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets 1 recipient 2, final, or 3 mailer-specific envelope recipients, has unknown consequences...
Malicious Code Vulnerability Due To Allowing Access To Mutable Objects
gateway is vulnerable to a malicious code vulnerability. The vulnerability exists because it is allowing access to mutable objects by not using final keyword appropriately in the code...
HP Client 9.19.08.17.9 - Command Injection
HP Client 9.19.08.17.9 - Command Injection Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on 8.1, 9.0, 9.1...
Design/Logic Flaw
Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow local users to obtain root access via crafted CLI input, aka Bug ID CSCuy21892...
MOBIUS FINAL FANTASY - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application MOBIUS FINAL FANTASY published at the 'play' market has multiple vulnerabilities...
FINAL FANTASY BRAVE EXVIUS - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application FINAL FANTASY BRAVE EXVIUS published at the 'play' market has multiple vulnerabilities...
FINAL FANTASY GRANDMASTERS - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application FINAL FANTASY GRANDMASTERS published at the 'play' market has multiple vulnerabilities...
FINAL FANTASY Record Keeper - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application FINAL FANTASY Record Keeper published at the 'play' market has multiple vulnerabilities...
Final Fable - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Final Fable published at the 'play' market has multiple vulnerabilities...
FINAL FANTASY PORTAL APP - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application FINAL FANTASY PORTAL APP published at the 'play' market has multiple vulnerabilities...
FINAL FANTASY Record Keeper - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application FINAL FANTASY Record Keeper published at the 'play' market has multiple vulnerabilities...