65 matches found
Syrian Hackers Distributing Stealthy C#-Based Silver RAT to Cybercriminals
Threat actors operating under the name Anonymous Arabic have released a remote access trojan RAT called Silver RAT that's equipped to bypass security software and stealthily launch hidden applications. "The developers operate on multiple hacker forums and social media platforms, showcasing an...
Identifying the Idaho Killer
The New York Times has a long article on the investigative techniques used to identify the person who stabbed and killed four University of Idaho students. Pay attention to the techniques: The case has shown the degree to which law enforcement investigators have come to rely on the digital...
footprints-inthe-sand.com Cross Site Scripting vulnerability OBB-1394325
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Our Experiences Participating in Microsoft’s Azure Sphere Bounty Program | McAfee Blogs
CSI: Evidence Indicators for Targeted Ransomware Attacks – Part II Christiaan Beek · FEB 20, 2020 In our first article we discussed the growing pattern of targeted ransomware attacks where the first infection stage is often an info-stealer kind of malware used to gain credentials/access to...
CSI: Evidence Indicators for Targeted Ransomware Attacks - Part II | McAfee Blogs
CSI: Evidence Indicators for Targeted Ransomware Attacks – Part II Christiaan Beek · FEB 20, 2020 In our first article we discussed the growing pattern of targeted ransomware attacks where the first infection stage is often an info-stealer kind of malware used to gain credentials/access to...
CSI: Evidence Indicators for Targeted Ransomware Attacks - Part II | McAfee Blogs
CSI: Evidence Indicators for Targeted Ransomware Attacks – Part II Christiaan Beek · FEB 20, 2020 In our first article we discussed the growing pattern of targeted ransomware attacks where the first infection stage is often an info-stealer kind of malware used to gain credentials/access to...
footprints-science.com XSS vulnerability
Open Bug Bounty ID: OBB-585859 Description| Value ---|--- Affected Website:| footprints-science.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
BMC Footprints Service Core Cross-Site Scripting Vulnerability
BMC Footprints Service Core is a suite of IT service and asset automation management platforms from BMC Software, USA. A cross-site scripting vulnerability exists in BMC Footprints Service Core version 11.5. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
Cross site scripting
Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...
CVE-2014-9514
Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...
CVE-2014-9514
BMC Footprints Service Core 11.5 is affected by a cross-site scripting (XSS) vulnerability in its web UI. CNVD-2017-30588 states that a remote attacker can exploit this to inject arbitrary web script or HTML. The NVD entry confirms XSS in Footprints Service Core 11.5. No remediation details are p...
CVE-2014-9514
Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...
BMC Footprints Service Core 11.5 Cross Site Scripting
About the Product: BMC FootPrints Service Core is an IT service and asset management platform used by many organizations to help the IT departments deliver more value to businesses. Advisory Details: During a Penetration testing, Help AG auditor Ayman Abdelaziz discovered the following: 1 Stored...
CVE-2008-7158
Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 transcriptFile parameter to MRcgi/MRchat.pl or 2 LOADFILE parameter to MRcgi/MRABLoad2.pl. NOTE: some of these details are obtained from third party...
CVE-2008-7158
Numara FootPrints versions 7.5a–8.0a are affected by a remote command execution vulnerability due to unsanitized shell metacharacters in the transcriptFile parameter to MRcgi/MRchat.pl or the LOADFILE parameter to MRcgi/MRABLoad2.pl. The underlying issue enables arbitrary command execution with a...
CVE-2008-7158
Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 transcriptFile parameter to MRcgi/MRchat.pl or 2 LOADFILE parameter to MRcgi/MRABLoad2.pl. NOTE: some of these details are obtained from third party...
Apple Safari JavaScript Engine Cross Domain Information Disclosure Vulnerability
Apple Safari web browser is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2008-1213
Cross-site scripting XSS vulnerability in Numara FootPrints for Linux 8.1 allows remote attackers to inject arbitrary web script or HTML via the Title form field when setting an appointment. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Cross site scripting
Cross-site scripting XSS vulnerability in Numara FootPrints for Linux 8.1 allows remote attackers to inject arbitrary web script or HTML via the Title form field when setting an appointment. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2008-1214
MRcgi/MRProcessIncomingForms.pl in Numara FootPrints 8.1 on Linux allows remote attackers to execute arbitrary code via shell metacharacters in the PROJECTNUM parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...