Rockstar Games: Control Character Injection In Messages

This report involved the injection of control characters, such as Null Byte 0x00, into vulnerable fields in the Message endpoints in order to cause unexpected, harmful behaviors. Our solution was to both block control characters from being saved on the backend when included in user-input, as well...

St. Jude Patches Additional Cardiac Device

St. Jude Medical has patched a vulnerability in another Merlin@home Transmitter medical device vulnerable to a man-in-the-middle attack. The medical device maker issued an update on Monday for its Merlin@home Transmitter “inductive” models, expanding the number of devices impacted by a...

Google to Red Flag 'Repeat Offender' Web Sites

Google upped the ante on Tuesday on its Safe Browsing efforts to warn users of questionable websites with the introduction of a Repeat Offender designation. The designation, Google says, builds on the company’s existing Safe Browsing warning system that blocks access to sites that are in violatio...

Google Shares Android Nougat, Safe Browsing Security Enhancements

Google this week shared with developers security enhancements it has added to the new Nougat version of Android and additional security features for webmasters via Safe Browsing to help pinpoint harmful content on websites. Under the banner of its nine-year-long Safe Browsing initiative, Google...

scielo.br XSS vulnerability

Vulnerable URL: http://www.scielo.br/statjournal.php?lang=pt=0102-6909" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5122 VIP website status:| Yes Check scielo.br SSL connection:...

Threat Outbreak Alert RuleID23684: Email Messages Distributing Malicious Software on June 30, 2016

Medium Alert ID: 46955 First Published: 2016 July 1 12:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23684 may contain the following files: Name | Size...

Android Security Bulletin—May 2016Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Nexus firmware images have also been released to the Google Developer site...

WordPress Beauty & Clean 1.0.8 Theme - Arbitrary File Upload

Exploit for php platform in category web applications Exploit Title: Wordpress Beauty Theme File Upload Vulnerability v1.0.8 Discovery Date: 02.09.2016 Public Disclosure Date:03.09.2016 Vendor Homepage: http://www.yourinspirationweb.com Exploit Author: Colette Chamberland Wordfence Contact:...

WordPress Theme Beauty Clean 1.0.8 - Arbitrary File Upload

WordPress Theme Beauty Clean 1.0.8 - Arbitrary File Upload Exploit Title: Wordpress Beauty Theme File Upload Vulnerability v1.0.8 Discovery Date: 02.09.2016 Public Disclosure Date:03.09.2016 Vendor Homepage: http://www.yourinspirationweb.com Exploit Author: Colette Chamberland Wordfence Contact:...

Threat Outbreak Alert RuleID15325: Email Messages Distributing Malicious Software on May 15, 2015

Medium Alert ID: 38890 First Published: 2015 May 15 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15325 and RuleID15325KVR may contain the following...

Google Report Lauds Android Security Enhancements

Google has put some hard numbers behind the effectiveness of the security enhancements it has dropped into Android in the past year, and results show that things such as SE Linux SE Android, Verify Apps and Safety Net have cut down on successful attacks against the Android operating system,...

Threat Outbreak Alert RuleID13787: Email Messages Distributing Malicious Software on March 3, 2015

Medium Alert ID: 37700 First Published: 2015 March 4 15:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13787 may contain the following files: Name | Siz...

2 5 2 9 net Union the use of the latest ie vulnerability mandatory installation of light micro-end-bug warning-the black bar safety net

I'm using Baidu browser ie compatible mode to browse http://www.dy2018.com this movie site, and found that somehow run the one called“Shine micro-end”of the game client, then I used smartsniff packet capture analysis, in the view source when the found a 2 5 2 9 net Union js advertising code, whic...

Scarlet Daisy Web CMS Cross Site Scripting

Scarlet Daisy Web CMS / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Software info |App. : Scarlet Daisy Web Web Content Management System. |Software: http://www.scarletdaisy.com |Vulnerability Style : Cross Site Scripting |Date : "09.12.2014"...

Joomla Component com_hotbrackets Blind SQL Injection Vulnerability

Joomla Component comhotbrackets Blind SQL injection Vulnerability author : Fl0riX Name : comhotbrackets Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : TRUE+ » http://server/index.php?option=comhotbrackets&id=1 and 1=1 FALSE- »...

Outlook Express 6 Attachment Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3271/info Microsoft Outlook Express 6 contains a new security feature which prevents users from opening potentially harmful file attachments. A vulnerability exists which allows a file embedded within an HTML frame in an...

Threat Outbreak Alert: Fake Purchase Order Request Email Messages on September 2, 2013

Medium Alert ID: 30630 First Published: 2013 September 3 17:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the email message attempts to convince the recipient ...

Collectivemind CMS SQL injection

Application Name : Collectivemind Vulnerable Type : SqL Injection Infection : Kullanýcý ve Yönetici Bilgileri Çekilebilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://www.collectivemindcms.co.za/home/index.php?ipkContentID=70...

Threat Outbreak Alert: Fake Photo Email Messages on November 18, 2013

Medium Alert ID: 30072 First Published: 2013 July 15 12:49 GMT Last Updated: 2013 November 18 22:45 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a personal photo for the recipient. The text in the email message attemp...

Overlapping content can trick users into executing downloads

Dialogs such as the download dialog are usually displayed on top of page content, to ensure that the user knows that the dialog is requesting attention. In some cases, this policy was not implemented correctly in Opera, allowing certain page content to overlay the dialog. In these cases, clicking...