33 matches found
CVE-2022-46484
Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...
CVE-2022-46485
The CVE-2022-46485 entry concerns Data Illusion Data Illusion Survey Software Solutions ngSurvey, affected in versions 2.4.28 and earlier. The underlying issue enables Denial of Service when a survey contains a Text Field, a Comment Field, or Contact Details. The NVD entry lists CVSS v3.1 metrics...
CVE-2022-46485
Data Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a survey contains a "Text Field", "Comment Field" or "Contact Details"...
Iranian Hackers Launch Sophisticated Attacks Targeting Israel with PowerLess Backdoor
An Iranian nation-state threat actor has been linked to a new wave of phishing attacks targeting Israel that's designed to deploy an updated version of a Windows backdoor called PowerLess. Cybersecurity firm Check Point is tracking the activity cluster under its mythical creature handle Educated...
Iranian Hackers Target Women Involved in Human Rights and Middle East Politics
Iranian state-sponsored actors are continuing to engage in social engineering campaigns targeting researchers by impersonating a U.S. think tank. "Notably the targets in this instance were all women who are actively involved in political affairs and human rights in the Middle East region,"...
Conti Ransomware Operation Shut Down After Splitting into Smaller Groups
Even as the operators of Conti threatened to overthrow the Costa Rican government, the notorious cybercrime gang officially took down its attack infrastructure in favor of migrating their malicious cyber activities to other ancillary operations, including Karakurt and BlackByte. "From the...
Cheating in Bird Racing
I've previously written about people cheating in marathon racing by driving -- or otherwise getting near the end of the race by faster means than running. In China, two people were convicted of cheating in a pigeon race: The essence of the plan involved training the pigeons to believe they had tw...
Illusion - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Illusion published at the 'play' market has multiple vulnerabilities...
3D Illusion Weekly Weather wid - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 3D Illusion Weekly Weather wid published at the 'play' market has multiple vulnerabilities...
Two from Team Poison arrested in MI6 hotline phone hack
Two from Team Poison arrested in MI6 hotline phone hack Police in the UK have arrested two teens as part of an investigation into illegal recordings of conversations on Scotland Yards anti-terror hotline, which were later posted on Youtube. Two teenage boys aged 16 and 17 years have been arreste...
In-Link SQL Directory Engine SQL Injection
Exploit Title: In-link SQL Directory Engine ALL VERSIONS SQL INJECTION Vulnerabilities Google Dork: intext:In-link SQL Directory Date: 08/09/2011 Author: http://www.in-portal.com/ Software Link: http://www.in-portal.com/modules/directory-management.html Version: ALL Versions Tested on: Windows 7 ...
Researchers Tracking Emerging Darkness Botnet
Researchers are tracking a new botnet that has become one of the more active DDoS networks on the Internet since its emergence early last month. The botnet, dubbed “Darkness,” is being controlled by several domains hosted in Russia and its operators are boasting that it can take down large sites...
bugzpladv1_eng.txt
0x15.0x05.Y2K ------------------------------------- BugzPL ADVISORY 1, final version ------------------------------------- Bypassing restricted bash for fun and profit ; I. Introduction bash-2 gives us a possibility to use a shell in restricted mode. This mode can be initiated using several metho...