1677 matches found
XMind has a dll hijacking vulnerability
XMind is a mind mapping software developed by Shenzhen Ice Software Technology Co., Ltd. and millions of users around the world are using XMind. XMind has a dll hijacking vulnerability that can be exploited by attackers to load a malicious dll and execute malicious code...
A History of Plans to Nuke Hurricanes (and Other Stuff Too)
If you think dropping a nuclear bomb into the eye of a hurricane is a bad idea, wait'll you see what they had in mind for the polar ice caps...
SQL Injection Vulnerability in Ice Point Ordering System of Chongqing Ice Dazzle Technology Co.
Ice point ordering treasure is used for unit internal canteen management system software, the main function is through the computer, cell phone and other mobile devices for ordering, reporting, cell phone ordering function. Ltd. There are SQL injection vulnerabilities in the system, which can be...
SQL Injection Vulnerability in Pur*** File of Ice Ordering Po
Ice point ordering treasure is a unit enterprise internal canteen ordering management software, through the cell phone APP wechat ordering, for canteen ordering consumption management. SQL injection vulnerability exists in the Pur file of Ice Point Ordering Treasure, which can be exploited by...
ICE HRM 23.0 - Multiple Vulnerabilities
Exploit for php platform in category web applications =========================================================================================== Exploit Title: ICE HRM - ’ob’ SQL Inj. Dork: N/A Date: 14-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://icehrm.org Software Link:...
ICE HRM 23.0 - Multiple Vulnerabilities
=========================================================================================== Exploit Title: ICE HRM - ’ob’ SQL Inj. Dork: N/A Date: 14-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://icehrm.org Software Link: https://sourceforge.net/projects/icehrm/ Version: v23.0...
ICE HRM 23.0 SQL / Iframe Injection
=========================================================================================== Exploit Title: ICE HRM - aoba SQL Inj. Dork: N/A Date: 14-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://icehrm.org Software Link: https://sourceforge.net/projects/icehrm/ Version: v23.0...
ICE HRM 23.0 - Multiple Vulnerabilities
ICE HRM 23.0 - Multiple Vulnerabilities =========================================================================================== Exploit Title: ICE HRM - ’ob’ SQL Inj. Dork: N/A Date: 14-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://icehrm.org Software Link:...
Internal Docs Show How ICE Gets Surveillance Help From Local Cops
Documents obtained by the ACLU show how ICE uses unofficial channels to access billions of license plate location data points—including some sanctuary cities...
File Upload Vulnerability in Ice OrderBox System
Ice point ordering treasure system is unit enterprise internal canteen ordering management software, through the cell phone APP WeChat ordering, for canteen ordering consumption management. A file upload vulnerability exists in Freezing Point Ordering System, which allows an attacker to upload a...
The vulnerability of the ICE data exchange library X11 libICE, related to the use of a weak entropy source for key generation, allows a hacker to intercept sessions.
The vulnerability of the ICE data exchange library X11 libICE is related to the use of a weak entropy source for key generation. Exploiting this vulnerability allows an attacker to intercept sessions by using information from the process list...
DNC Accuses Russia, ACLU Sues ICE, and More Security News This Week
Trump dominated security headlines this week, but there's plenty of other news to catch up on...
Adventures in Video Conferencing Part 1: The Wild World of WebRTC
Posted by Natalie Silvanovich, Project Zero Over the past five years, video conferencing support in websites and applications has exploded. Facebook, WhatsApp, FaceTime and Signal are just a few of the many ways that users can make audio and video calls across networks. While a lot of research ha...
Hidden Cameras in Streetlights
Both the US Drug Enforcement Administration DEA and Immigration and Customs Enforcement ICE are hiding surveillance cameras in streetlights. According to government procurement data, the DEA has paid a Houston, Texas company called Cowboy Streetlight Concealments LLC roughly $22,000 since June 20...
Authentication flaw
Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...
CVE-2013-7465
Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...
CVE-2013-7465
Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...
CVE-2013-7465
CVE-2013-7465 affects Ice Cold Apps Servers Ultimate 6.0.2(12), where no authentication is required for TELNET, SSH, or FTP, enabling remote attackers to upload PHP scripts and execute arbitrary code. The issue is documented with high CVSS scores (e.g., CVSS v2 base 7.5; CVSS v3 base 9.8) indicat...
CVE-2017-18301
In Small Cell SoC and Snapdragon Automobile, Mobile, Wear in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, SnapdragonHighMed2016, providing the NULL...
CVE-2017-18301
In Small Cell SoC and Snapdragon Automobile, Mobile, Wear in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, SnapdragonHighMed2016, providing the NULL...