GHSA-744R-VV2G-2X6G Apache NiFi information disclosure by XXE

The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services via XXE and reveal information such as the versions of Java, Jersey, and Apache that the NiFI...

XML External Entities (XXE)

nifi-lookup-services is vulnerable to XML external entities XXE. The vulnerability exists as the XMLFileLookupService allowed trusted users to use a malicious XML file to cause information such as the versions of Java, Jersey, and Apache to be revealed...

CVE-2019-10080

The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services via XXE and reveal information such as the versions of Java, Jersey, and Apache that the NiFI...

CVE-2019-10080

The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services via XXE and reveal information such as the versions of Java, Jersey, and Apache that the NiFI...

Information disclosure

The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services via XXE and reveal information such as the versions of Java, Jersey, and Apache that the NiFI...

Woman charged for hacking & leaking private pictures of Selena Gomez

By Carolina Selena Gomez, a well-known celebrity pop star, is in the news for getting her email hacked that led to the exposure of her personal pictures on the internet. A 21-year old female has been arrested and charged for performing the hacking of Gomez’ email. Susan Atrach from Ridgefield Par...

21-Year-Old Woman Charged With Hacking Selena Gomez's Email Account

A 21-year-old New Jersey woman has been charged with hacking into the email accounts of pop star and actress Selena Gomez, stealing her personal photos, and then leaked them to the Internet. Susan Atrach of Ridgefield Park was charged Thursday with 11 felony counts—five counts of identity theft,...

San Diego Sues Experian Over ID Theft Service

The City of San Diego, Calif. is suing consumer credit bureau Experian, alleging that a data breach first reported by KrebsOnSecurity in 2013 affected more than a quarter-million people in San Diego but that Experian never alerted affected consumers as required under California law. The lawsuit,...

newjerseyconferenceofmayors.com XSS vulnerability

Open Bug Bounty ID: OBB-577659 Description| Value ---|--- Affected Website:| newjerseyconferenceofmayors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fams.franklinlakes.k12.nj.us XSS vulnerability

Open Bug Bounty ID: OBB-451151 Description| Value ---|--- Affected Website:| fams.franklinlakes.k12.nj.us Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

jerseyvetlab.nj.gov XSS vulnerability

Vulnerable URL:...

XML Entity Expansion (XEE)

Jersey common is vulnerable to billion laugh attacks. These attacks are possible because it does not disable XML Entity Expansion XEE...

Ukrainian Hacker Admits Stealing Corporate Press Releases for $30 Million Profit

A 28-year-old Ukrainian hacker has pleaded guilty in the United States to stealing unpublished news releases and using that non-public information in illegal trading to generate more than $30 Million £20.8 Million in illicit profits. Vadym Iermolovych, 28, admitted Monday that he worked with two...

COMODO Cross Site Scripting

Exploit Title: COMODO Subdomain XSS Vulnerability Google Dork: N/A Date: 2016/2/3 Exploit Author: RootByte Vendor Homepage: http://personalfirewall.comodo.com/ Software Link: N/A Version: N/A Tested on: Windows 10 / FireFox 44.0 CVE : N/A about Wikipedia: COMODO is a privately held group of...

jerseymikes.com XSS vulnerability

Vulnerable URL: https://www.jerseymikes.com/gift-cards/ Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 68617 Google Pagerank| 5 VIP website status:| No...

Hack That Fueled Insider Trading Ring Netted $100M

Hackers based in Ukraine and Russia allegedly broke into servers belonging to several newswires and passed sensitive information onto an underground trading ring as part of what’s being referred to as an unprecedented new level of insider trading. Prosecutors claimed Tuesday that corporate...

education.state.nj.us XSS vulnerability

Vulnerable URL: http://education.state.nj.us/broadcasts/search.php?q=%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 29.07.2015 Latest check for patch:| 29.07.2015 01:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Information disclosure

The Breeze Jersey aka com.sc.breezeje.banking application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7431

The Breeze Jersey aka com.sc.breezeje.banking application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7431

The Breeze Jersey (com.sc.breezeje.banking) Android application 1.0 does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. This is supported by the CVE-2014-7431 entries in NVD and ...