Revamp of ‘Pwned Passwords’ Boosts Privacy and Size of Database

Researcher Troy Hunt announced a major revamp of his Pwned Passwords tool that includes more passwords, added features and tightened privacy for organizations who want to check if their in-use passwords can easily be cracked. In V2 of Pwned Passwords, launched last week, Hunt updated his password...

K7 Antivirus Premium elevation of privilege vulnerability (CNVD-2018-02145)

K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions prior to K7 Antivirus Premium 15.1.0.53. A local attacker can exploit the vulnerability to gain privileges by sending a specific IOCTL...

K7 Antivirus Premium Arbitrary Memory Location Write Vulnerability

K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in K7 Antivirus Premium versions prior to 15.1.0.53. A local attacker can exploit this vulnerability with input to perform a write operation to an arbitrary memory location...

CVE-2017-17429

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL...

K7 Antivirus K7Sentry.sys Denial of Service Vulnerability (CNVD-2018-01083)

K7 Antivirus is a suite of anti-virus software from the Indian company K7 Computing.K7Sentry.sys is one of the kernel-mode drivers used in K7 Computing's security products. A security vulnerability exists in K7 Antivirus version 15.1.0309 in K7Sentry.sys version 15.1.0.59. An attacker can exploit...

k-pj.com XSS vulnerability

Open Bug Bounty ID: OBB-453924 Description| Value ---|--- Affected Website:| k-pj.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

k-addicts.net XSS vulnerability

Open Bug Bounty ID: OBB-453905 Description| Value ---|--- Affected Website:| k-addicts.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Multiple OEM - 'nsd' Remote Stack Format String (PoC)

STX Subject: Remote Stack Format String in 'nsd' binary from multiple OEM Attack vector: Remote Authentication: Anonymous no credentials needed Researcher: bashis December 2017 PoC: https://github.com/mcw0/PoC Release date: December 14, 2017 Full Disclosure: 0-Day - PoC - 1 $ curl...

k-z.com.ua XSS vulnerability

Open Bug Bounty ID: OBB-452751 Description| Value ---|--- Affected Website:| k-z.com.ua Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

k-tanac.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-441304 Description| Value ---|--- Affected Website:| k-tanac.co.jp Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

October 26, 2017 – Morning Cyber Coffee Headlines – “Continental Congress” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 26, 2017 - Headlines Carbon Black in the News: Protecting elections fro...

k-swiss.co.il XSS vulnerability

Open Bug Bounty ID: OBB-360513 Description| Value ---|--- Affected Website:| k-swiss.co.il Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

k-1sport.de XSS vulnerability

Open Bug Bounty ID: OBB-338518 Description| Value ---|--- Affected Website:| k-1sport.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

k-popped.com Open Redirect vulnerability

Vulnerable URL: http://k-popped.com/page/220/?adsclick=1=29715-29714-29713-29712-1=51a3471b7b=http%3A%2F%2Fopenbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 515773 VIP website status:| N...

k-popped.com Open Redirect vulnerability

Vulnerable URL: http://k-popped.com/page/217/?adsclick=1=29715-29714-29713-29712-1=51a3471b7b=http%3A%2F%2Fopenbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 515773 VIP website status:| N...

k-ranch.net XSS vulnerability

Vulnerable URL: http://www.k-ranch.net/typo3conf/ext/kjimagelightbox2/lib/class.txkjimagelightbox2print.php?image=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

k-online.de XSS vulnerability

Open Bug Bounty ID: OBB-317082 Description| Value ---|--- Affected Website:| k-online.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 25 Update: k3d-0.8.0.6-8.fc25

K-3D is a complete 3D modeling, animation and rendering system. K-3D features a robust, object oriented plugin architecture, designed to scale to the needs of professional artists. It is designed from the ground up to generate motion picture quality animation using RenderMan compliant render...

[SECURITY] Fedora 26 Update: k3d-0.8.0.6-8.fc26

K-3D is a complete 3D modeling, animation and rendering system. K-3D features a robust, object oriented plugin architecture, designed to scale to the needs of professional artists. It is designed from the ground up to generate motion picture quality animation using RenderMan compliant render...

Clustering and Dimensionality Reduction: Understanding the “Magic” Behind Machine Learning

These days we hear about machine learning and artificial intelligence AI in all aspects of life. We see machines that learn and imitate the human brain in order to automate human processes. There are autonomous cars that learn the road conditions to drive, personal assistants we can converse with...