August 21, 2017 – Morning Cyber Coffee Headlines – “Solar Eclipse” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 21, 2017 - Headlines Carbon Black in the News: Trump increases status of...

August 18, 2017 – Morning Cyber Coffee Headlines – “New York Times” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 18, 2017 - Headlines These women want to fix cybersecurity’s massive...

Promoting Online Safety in Canada: Trend Micro Launches Video Contest for Local Kids

At Trend Micro we always strive to be a responsible corporate citizen. Right from the beginning the company has devoted significant time and resources to a variety of projects: from house building in the Philippines, to our Give and Match programs around the world designed to support vital...

it.russian-dating.com XSS vulnerability

Vulnerable URL: http://it.russian-dating.com/search?gender=2;name="...

perfumeoutlet.net XSS vulnerability

Vulnerable URL: http://www.perfumeoutlet.net/fragrancesproduct.asp?gender=1/-///%27/%22//--%3E%3C/script%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3Ew=DESIGN+by+Paul+Sebastian Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.09.2017 Vulnerability type:| XSS Vulnerability...

TOVA 8 Unquoted Service Path Privilege Escalation Vulnerability

TOVA 8 Precision Test Environment P.T.E suffers from an unquoted service path privilege escalation vulnerability. Exploit Title: TOVA 8 Precision Test Environment P.T.E - Unquoted Service Path Privilege Escalation Date of Discovery: February 17 2017 Exploit Author: Rithwik Jayasimha Author...

PHP Matrimonial Script 3.0 - SQL Injection

Exploit Title: Matrimonial Script v3.0 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/matrimonial-script/ Demo: http://74.124.215.220/matriialscrip/ Version: 3.0 Tested on: Win7 x64, Kali Linux x64...

genderdreaming.com Open Redirect vulnerability

Vulnerable URL: http://genderdreaming.com/forum/redirect-to/?redirect=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 881724 VIP website...

Boy or girl - gender predictor - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Boy or girl - gender predictor published at the 'play' market has multiple vulnerabilities...

Baby Gender Predictor - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Baby Gender Predictor published at the 'play' market has multiple vulnerabilities...

YourTube 1.0 - CSRF Vulnerability (Add User)

No description provided by source. YourTube v1.0 CSRF Vulnerability Add User ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://www.ac4p.com/ .:. Dork : inurl:Powered by YourTube v1.0 === Exploit === form method=POST...

BloofoxCMS Registration Plugin SQL Injection Vulnerability

No description provided by source. Vulnerability ID: HTB22658 Reference: http://www.htbridge.ch/advisory/sqlinjectioninbloofoxcmsregistrationplugin.html Product: BloofoxCMS Vendor: bloofox.com http://bloofox.com/ Vulnerable Version: 0.3.5 and probably prior versions Vendor Notification: 13 Octobe...

phpBB2 Gender Mod 1.1.3 - Remote SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5342/info phpBB2 is an open-source web forum application that is written in PHP and backended by a number of database products. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems...

UAMS Alerts Patients to Data Breach Linked to Fired Resident

The University of Arkansas for Medical Sciences is letting some 1,500 patients know their information was kept without permission by a resident physician after she was terminated. The health care facility plans to mail impacted patients who had surgery or were seen by a neurosurgeon from January ...

Most Smartphone Users Consider Privacy When Vetting Apps

Cellphone owners now account for 88 percent of the U.S. population, of which some 43 percent say they download applications on their phones. Among these ‘app users,’ 57 percent told the Pew Internet and American Life Project that they have either uninstalled existing applications or made the...

Study: Password Security Improves with Age

Baby Boomers may not be perceived as tech savvy as Millenials, but they apparently are better at protecting their digital assets. A new British study believed to be the largest of its kind shows those 55 and older tend to pick passwords with twice the strength of those under 25. It also indicates...

Sql injection

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...

CVE-2010-4870

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...

IC3: Internet Crime Up in 2010

Internet crime is on the rise again according to a report recently released by The Internet Crime Complaint Center IC3. The organization said last week that it received the second-highest number of complaints in its decade long history in 2010. Released on February 24, the 2010 Internet Crime...

BloofoxCMS Registration Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== BloofoxCMS Registration Plugin SQL Injection Vulnerability ========================================================== Reference:...