Core Tor Contributor Leaves Project; Shutting Down Important Tor Nodes

Another blow to the Tor Project: One of the Tor Project's earliest contributors has decided to quit the project and shut down all of the important Tor nodes under his administration. Lucky Green was part of the Tor Project before the anonymity network was known as TOR. He probably ran one of the...

WVSS and RSAS to help you quickly detect Apache Struts2 remote code execution vulnerability S2-0 3 7-vulnerability warning-the black bar safety net

Apache Struts2 using the REST plugin the cases, the attacker uses REST calls malicious expression can be remote code execution. The vulnerability number CVE-2 0 1 6-4 4 3 8, Set Name, S2-0 3 to 7. The vulnerability and S2-0 3 3 vulnerability to trigger the process is basically the same, are in th...

UBUNTU-CVE-2016-5691

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of 1 pixel.red, 2 pixel.green, and 3 pixel.blue...

绿麻雀 p2p网贷系统sql注入漏洞

No description provided by source...

Green Farm 3 - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Green Farm 3 published at the 'play' market has multiple vulnerabilities...

Official Green Bay Packers - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Official Green Bay Packers published at the 'play' market has multiple vulnerabilities...

Overstepping Vulnerability in RSAS of Green Alliance Remote Security Assessment System (RSAS)

Green Alliance Remote Security Assessment System referred to as: NSFOCUS RSAS integrates Web application scanning module, which can automate the vulnerability detection of Web applications, Web services and support systems. There is an overstepping vulnerability in NSFOCUS RSAS. Due to incomplete...

Green Alliance RSAS Override Access Vulnerability

Green Alliance Remote Security Assessment System is a new generation of vulnerability management products independently developed by Green Alliance. Green Alliance RSAS has overstepping access vulnerabilities, which can be exploited by an attacker to obtain other users' usernames, passwords and...

Database Assessment Tool: DbDat

DbDat performs numerous checks on a database to evaluate security. The categories of checks performed are configuration, privileges, users, and information. Checks are performed by running queries or reading database configuration files. The goal of this tool is to highlight issues that need...

green-kit.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-118279 Description| Value ---|--- Affected Website:| green-kit.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

green-card.co.za XSS vulnerability

Vulnerable URL: https://www.green-card.co.za/SixthSenseSite/medicalInformation.php?Cellnumber=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Loki - Scanner for Simple Indicators of Compromise

Simple IOC Scanner Detection is based on four detection methods: 1. File Name IOC Regex match on full file path/name 2. Yara Rule Check Yara signature match on file data and process memory 3. Hash check Compares known malicious hashes MD5, SHA1, SHA256 with scanned files The Windows binary is...

OAuth Hacks A gentle introduction to OAuth 2 and Apache Oltu

Here I posted the slides of the JUG event in Basel. I have been kind of quiet lately in this space. I have a couple on vulnerabilities outstanding one OAuth related and one browser related. Waiting for the green light... stay tuned...

TrueCrypt Audit Cryptanalysis Handed Off to NCC Group

The stagnant TrueCrypt audit stirred to life in the last 24 hours with the announcement that the second phase of the audit, tasked with examining the cryptography behind the open source disk encryption software, will begin shortly. NCC Group’s Cryptography Services has been contracted to do the...

Certificate Transparency Moves Forward With First Independent Log

The Certificate Transparency scheme proposed by Google engineers has taken a couple of significant steps forward recently, with the approval of the first independent certificate log and the passing of a deadline for all extended validation certificates to be CT-compliant or lose the green indicat...

Fedora 21 : python-oauth2-1.5.211-8.fc21 (2014-12483)

Actually apply patch to fix CVE-2013-4347 thanks to Jason Green, Matt Wilson. Fix CVE-2013-4346 and CVE-2013-4347, thanks to Philippe Makowski. Fix CVE-2013-4346 and CVE-2013-4347, thanks to Philippe Makowski. Note that Tenable Network Security has extracted the preceding description block direct...

CVE-2014-7800

The Daily Green aka it.opentt.blog.dailygreen application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Daily Green aka it.opentt.blog.dailygreen application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7800

The Daily Green aka it.opentt.blog.dailygreen application 2014.07 dlygrn for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7800

The CVE-2014-7800 entry concerns The Daily Green (Android app, 2014.07 dlygrn) that does not verify X.509 certificates when connecting to SSL servers. The root cause is missing TLS certificate validation, enabling man-in-the-middle attackers to spoof servers and potentially disclose sensitive inf...