Mysterious database exposed personal information of 80 million US households

Word has broken of yet another massive data trove exposed for anyone to see. A research team from vpnMentor discovered an exposed 24GB database hosted on a Microsoft cloud server containing the addresses, income levels, and marital statuses of users within 80 million US households. As we’ve seen...

SAS 2019: Exodus Spyware Found Targeting Apple iOS Users

SINGAPORE— The Exodus spyware that was recently found lurking in 25 different malicious apps on Google Play has been ported to the Apple iOS ecosystem. The surveillance package can exfiltrate contacts, take audio recordings and photos, track location data and more on mobile devices. Earlier this...

Apple tvOS and Apple iOS GeoServices Memory Corruption Vulnerability

Apple iOS and Apple tvOS are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple tvOS is a smart TV operating system. geoServices is a geo-services component. A memory corruption vulnerability exists in the GeoServices component in Apple iOS before 12.2 and tvOS...

Prevent Access to Unauthorized Viewers with Enhanced Proxy Detection

Background: Geo-Blocking Content There are no hard and fast rules to the way content is licensed throughout the world, but typically content owners develop license agreements at the country level which gives them a fair amount of flexibility when monetizing their content. These license agreements...

Phishing Campaign Toolkit: King Phisher

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...

geo-graf.pl XSS vulnerability

Open Bug Bounty ID: OBB-706559 Description| Value ---|--- Affected Website:| geo-graf.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

sLoad Banking Trojan Downloader Displays Sophisticated Recon and Targeting

A new PowerShell downloader dubbed sLoad is making the rounds, sporting impressive reconnaissance tactics and a penchant for geofencing, which indicate increasing sophistication when it comes to targeting efforts. First spotted in May 2018, sLoad typically delivers the Ramnit banking trojan but h...

Ensure Highly Reliable First Mile Connectivity with Akamai Direct Connect

As linear OTT video services become mainstream, many broadcasters and online video distributors are increasingly looking for new ways to enhance service reliability. Many who manage their own origin infrastructures within a datacenter environment are seeking added assurance for ingest of their...

Enhancing API Protection in Web Application Protector

by Volker Tegtmeyer and Hans Cathcart Are your APIs protected? Do you feel your business data is safe? Application Programming Interfaces API are a great tool for developers to build new applications faster. They're great for helping businesses implement and evolve new business models faster by...

geo-tag.de XSS vulnerability

Open Bug Bounty ID: OBB-678508 Description| Value ---|--- Affected Website:| geo-tag.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

yourplasticsurgeryguide.com XSS vulnerability

Open Bug Bounty ID: OBB-656641 Description| Value ---|--- Affected Website:| yourplasticsurgeryguide.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cirene.udea.edu.co XSS vulnerability

Open Bug Bounty ID: OBB-655014 Description| Value ---|--- Affected Website:| cirene.udea.edu.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Geo Mashup plugin <= 1.10.3 - Unspecified Cross-Site Scripting (XSS) vulnerability

Unspecified Cross-Site Scripting XSS vulnerability found in WordPress Geo Mashup plugin versions = 1.10.3. Solution Update the WordPress Geo Mashup plugin to the latest available version at least 1.10.4...

WordPress Geo Mashup Plugin Design Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform , the platform supports PHP and MySQL server set up a personal blog site . Geo Mashup is one of the plug-ins that can save the posts , pages and other location information and generate...

Geo Mashup <= 1.10.3 - Unspecified Cross-Site Scripting (XSS)

The Geo Mashup WordPress plugin was affected by an Unspecified Cross-Site Scripting XSS security vulnerability...

CVE-2018-14071

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input...

CVE-2018-14071

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input...

Input validation

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input...

CVE-2018-14071

The CVE-2018-14071 entry concerns the WordPress Geo Mashup plugin (versions prior to 1.10.4). The underlying issue is insufficient sanitization of post editor and other user input, which is the root cause of the vulnerability. Public references (NVD/CVE records) indicate a high to critical impact...

PT-2018-12322 · WordPress · Geo Mashup

Name of the Vulnerable Software and Affected Versions: Geo Mashup plugin versions prior to 1.10.4 Description: The issue is related to insufficient sanitization of user input, including post editor input. This could potentially lead to security issues, but specific details about exploitation or...