9612 matches found
CVE-2012-6631: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the authentication of administrators for requests that add accounts via a new-client action...
[Kali Linux 1.0.6] with LUKS Self-Destruction Feature
Offensive Security, the creator of the famous BackTrack Linux operating system, has announced on January 9 that a new maintenance release for its Kali Linux distribution is now available for download. Kali Linux 1.0.6 is the first release to introduce an amazing feature called "emergency...
Juniper Networks Junos OS Stack Exhaustion Denial of Service Vulnerability
Denial of Service vulnerability due to stack exhaustion in glibc used by Junos SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PYSEC-2014-97
Libcloud 0.12.3 through 0.13.2 does not set the scrubdata parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM...
Narrative Authentication System an Alternative to Passwords
Remember the age of text-based gaming where natural language phrasing would help you maneuver a character through scenes in a virtual world? In a gaming context, that has long been a dinosaur, replaced by intricate and massive online role-playing games. But researchers from Carleton University in...
Syrian Electronic Army Hacks Skype Twitter Account With Anti-Surveillance Message
The Syrian Electronic Army took advantage of the relative calm of New Year’s Day to make a loud statement about the NSA’s surveillance program and Microsoft’s alleged participation in it. The group compromised the Twitter account and blog of Microsoft’s Skype service and posted anti-surveillance...
Happy Holidays and Merry Christmas from 'The Hacker News'
The Christmas spirit has finally arrived. It's Christmas Day, a time for family and friends.We have had another wonderful year here at 'The Hacker News', so we not only want to wish you a Happy Holidays and Merry Christmas, but also thank you for reading our articles, commenting, sending tips and...
Fedora 20 : kernel-3.12.5-302.fc20 (2013-23445)
The 3.12.5 kernel contains support for new devices, and a number of bug fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...
ca-certificates-mozilla: add, remove or blacklist some certificates (important)
The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. distrust: AC DG Tresor SSL bnc854367 new:...
eFront 3.6.14 Cross Site Scripting
EDB Note: Screenshot provided by exploit author. Exploit Title: eFront v3.6.14 build 18012 -Stored XSS in multiple Parameters Author: sajith version: eFront v3.6.14- build 18012 Vendor Homepage: http://www.efrontlearning.net/ vulnerable app link:http://www.efrontlearning.net/download POC by sajit...
eFront 3.6.14 (build 18012) - Multiple Persistent Cross-Site Scripting Vulnerabilities
eFront 3.6.14 build 18012 - Multiple Persistent Cross-Site Scripting Vulnerabilities Exploit-DB Note: Screenshot provided by exploit author. Exploit Title: eFront v3.6.14 build 18012 -Stored XSS in multiple Parameters Author: sajith version: eFront v3.6.14- build 18012 Vendor Homepage:...
CVE-2013-4492
Cross-site scripting XSS vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call...
[OWASP GoatDroid] Project that will help educate security to application developers Android
OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications:...
TIME Magazine Twitter account hacked by Syrian Electronic Army
Just now, The hacktivist group Syrian Electronic Army SEA briefly took over the Twitter account of the TIME Magazine. The Hacker group tweeted from the TIME's official account, "Syrian Electronic Army Was Here via @OfficialSEA16..Next time write a better word about the Syrian president SEA" with...
Pirelli Discus DRG A125g - Remote Change SSID Value
Exploit Title: Pirelli Discus DRG A125g remote change SSID value vulnerability Hardware: Pirelli Discus DRG A125g Date: 2013/11/23 Exploit Author: Sebastián Magof Tested on: Linux/Windows Twitter: @smagof Greetz: Family, friends && under guys. Special Greetz: / αlpha "" Exploit:...
Gaming Company Settles on Bitcoin Mining Allegations
The ESEA League, an online competitive gaming community, has decided to settle with the state of New Jersey after the acting attorney general there alleged that the gaming community operator infected user-machines with malware designed to mine Bitcoins. The league is owned and managed by E-Sports...
freelancer-info NSE Script
Detects the Freelancer game server FLServer.exe service by sending a status query UDP probe. When run as a version detection script -sV, the script will report on the server name, current number of players, maximum number of players, and whether it has a password set. When run explicitly --script...
Google Pays $17 Million to Settle Privacy Violations
Thirty-seven states are claiming a privacy victory against Google and will split a $17 million settlement from the search giant. Google, which generated $2.97 billion in online advertising revenue in the third quarter, was deliberately bypassing default privacy settings in Apple’s Safari browser ...
A jingdong log security vulnerabilities-vulnerability warning-the black bar safety net
Table of Contents 1 Introduction 2 the inspection process 3 Summary 1 Introduction Recently looking at an open source site code, found if the login page via the http Protocol requests, will be redirected to use the https Protocol of the url, so you can ensure login security. Today a whim, want to...