41 matches found
Data Illusion Survey Software Solutions NGSurvey Security Breach
ngSurvey is a Data Illusion Survey Software Solutions by ngSurvey, Inc. A security vulnerability exists in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and earlier versions, which stems from vulnerability to denial-of-service attacks if a survey is submitted that contains Text Field,...
Data Illusion Survey Software Solutions NGSurvey Information Disclosure Vulnerability
ngSurvey is a Data Illusion Survey Software Solutions by ngSurvey, Inc. An information disclosure vulnerability exists in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and prior versions, which stems from a vulnerability that allows an attacker to view access passwords and arbitrarily...
CVE-2022-46485
Data Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a survey contains a "Text Field", "Comment Field" or "Contact Details"...
CVE-2022-46484
Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...
CVE-2022-46484
Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...
PT-2023-14942 · Data Illusion Survey Software Solutions · Ngsurvey
Name of the Vulnerable Software and Affected Versions: Data Illusion Survey Software Solutions ngSurvey versions 2.4.28 and below Description: The issue allows for Denial of Service when a survey contains a "Text Field", "Comment Field", or "Contact Details". Recommendations: For versions 2.4.28...
CVE-2022-46485
Data Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a survey contains a "Text Field", "Comment Field" or "Contact Details"...
PT-2023-14941
Name of the Vulnerable Software and Affected Versions Data Illusion Survey Software Solutions NGSurvey versions 2.4.28 and below Description The issue allows attackers to view the password for password-protected surveys, enabling them to access and arbitrarily submit surveys. Recommendations For...
CVE-2022-46484
The CVE-2022-46484 entry affects Data Illusion Survey Software Solutions NGSurvey (NGSurvey) v2.4.28 and earlier. The vulnerability enables information disclosure by allowing attackers to view the access password, which in turn could be used to access and arbitrarily submit surveys. The connected...
CVE-2022-46485
The CVE-2022-46485 entry concerns Data Illusion Data Illusion Survey Software Solutions ngSurvey, affected in versions 2.4.28 and earlier. The underlying issue enables Denial of Service when a survey contains a Text Field, a Comment Field, or Contact Details. The NVD entry lists CVSS v3.1 metrics...
CVE-2022-46484: Insecure Storage of Sensitive Information
Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...
Iranian Hackers Launch Sophisticated Attacks Targeting Israel with PowerLess Backdoor
An Iranian nation-state threat actor has been linked to a new wave of phishing attacks targeting Israel that's designed to deploy an updated version of a Windows backdoor called PowerLess. Cybersecurity firm Check Point is tracking the activity cluster under its mythical creature handle Educated...
Iranian Hackers Target Women Involved in Human Rights and Middle East Politics
Iranian state-sponsored actors are continuing to engage in social engineering campaigns targeting researchers by impersonating a U.S. think tank. "Notably the targets in this instance were all women who are actively involved in political affairs and human rights in the Middle East region,"...
Conti Ransomware Operation Shut Down After Splitting into Smaller Groups
Even as the operators of Conti threatened to overthrow the Costa Rican government, the notorious cybercrime gang officially took down its attack infrastructure in favor of migrating their malicious cyber activities to other ancillary operations, including Karakurt and BlackByte. "From the...
Cheating in Bird Racing
I've previously written about people cheating in marathon racing by driving -- or otherwise getting near the end of the race by faster means than running. In China, two people were convicted of cheating in a pigeon race: The essence of the plan involved training the pigeons to believe they had tw...
Illusion - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Illusion published at the 'play' market has multiple vulnerabilities...
3D Illusion Weekly Weather wid - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 3D Illusion Weekly Weather wid published at the 'play' market has multiple vulnerabilities...
Two from Team Poison arrested in MI6 hotline phone hack
Two from Team Poison arrested in MI6 hotline phone hack Police in the UK have arrested two teens as part of an investigation into illegal recordings of conversations on Scotland Yards anti-terror hotline, which were later posted on Youtube. Two teenage boys aged 16 and 17 years have been arreste...
In-Link SQL Directory Engine SQL Injection
Exploit Title: In-link SQL Directory Engine ALL VERSIONS SQL INJECTION Vulnerabilities Google Dork: intext:In-link SQL Directory Date: 08/09/2011 Author: http://www.in-portal.com/ Software Link: http://www.in-portal.com/modules/directory-management.html Version: ALL Versions Tested on: Windows 7 ...
Researchers Tracking Emerging Darkness Botnet
Researchers are tracking a new botnet that has become one of the more active DDoS networks on the Internet since its emergence early last month. The botnet, dubbed “Darkness,” is being controlled by several domains hosted in Russia and its operators are boasting that it can take down large sites...