Leaked Details of 142 Million MGM Hotel Guests Found for Sale Online

Researchers have found 142 million personal details from former guests at the MGM Resorts hotels for sale on the dark web, evidence that a data leak from the hotel chain last summer may be far bigger in scope than previously thought. An advertisement on a hacker forum has put 142,479,937 details...

Silent Night Banking Trojan Charges Top Dollar on the Underground

A descendant of the infamous Zeus banking trojan, dubbed Silent Night by the malware’s author, has emerged on the scene, with a host of functionalities available in a spendy malware-as-a-service MaaS model. Custom builds can run as much as $4,000 per month to use, which researchers say is now...

Shining a light on “Silent Night” Zloader/Zbot

When it comes to banking Trojans, ZeuS is probably the most famous one ever released. Since its source code originally leaked in 2011, several new variants proliferated online. That includes a past fork called Terdot Zbot/Zloader, which we extensively covered in 2017. But recently, we observed...

Chromepass - Hacking Chrome Saved Passwords

Chromepass is a python-based console application that generates a windows executable with the following features: Decrypt Chrome saved paswords Send a file with the login/password combinations remotely email or reverse-http Custom icon Completely undetectable by AntiVirus Engines AV Detection! Du...

Command Execution Vulnerability in Night God Android Emulator for Windows

Night God Android Emulator is an Android emulator from Beijing Multipoint Online Technology Co. A command execution vulnerability exists in the Windows version of Night God Android Emulator, which can be exploited by attackers to execute malicious code...

Interpol Arrests 3 Indonesian Credit Card Hackers for Magecart Attacks

The Indonesian National Police in a joint press conference with Interpol and cybersecurity firm Group-IB earlier today announced the arrest of three Magecart-style Indonesian hackers who had compromised hundreds of international e-commerce websites and stolen payment card details of their online...

night-lux.de Cross Site Scripting vulnerability

Security Researcher badmaxx Helped patch 1670 vulnerabilities Received 5 Coordinated Disclosure badges Received 5 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting night-lux.de website and its users. Following coordinated a...

CVE-2019-19541

The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page...

CVE-2019-19541

The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page...

CVE-2019-19541

CVE-2019-19541 affects the ListingPro WordPress Directory Theme prior to v2.0.14.2, exposing a persistent XSS vulnerability via the Best Day/Night field on the new listing submit page. Public details in connected records describe the vulnerable input fields and the exploit path, including known P...

Unmasking mystery boxes on ship’s bridges

We pen test a variety of vessel and platform types across different fleets and operators. In every single test to date we have unearthed a system or device, that of the few crew that were aware, no-one could tell us what it is was for. In other scenarios an undocumented system or device would be...

CVE-2019-6165

A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Night light feature introduced in Windows 10 Build 1703 provides similar features...

Privilege escalation

A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Night light feature introduced in Windows 10 Build 1703 provides similar features...

CVE-2019-6165

A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Night light feature introduced in Windows 10 Build 1703 provides similar features...

CVE-2019-6165

CVE-2019-6165 concerns a DLL search path vulnerability in Lenovo’s PaperDisplay Hotkey Service v1.2.0.8 and earlier that could enable privilege escalation. Root cause: improper DLL search path handling in PaperDisplay Hotkey Service. Impact: privilege escalation possible on affected systems; Leno...

PT-2019-17996 · Lenovo +1 · Paperdisplay Hotkey Service +1

Name of the Vulnerable Software and Affected Versions: PaperDisplay Hotkey Service version 1.2.0.8 Description: A DLL search path issue was reported that could allow privilege escalation. The software's functionality is superseded by the Night light feature in Windows 10 Build 1703 and later...

PaperDisplay Hotkey Vulnerability - Lenovo Support US

No description provided...

Meet IRpair & Phantom; powerful anti-facial recognition glasses

By Uzair Amir IRpair and Phantom are the first-ever collections of anti-facial recognition glasses and sunglasses designed to block facial recognition, eye tracking & infrared radiation including 3D IR surveillance cameras during both day and night. Facial recognition technology is the single...

June 27, 2019—KB4501375 (OS Build 18362.207)

None None...

SQL Injection Vulnerability in the Website Building System of Beijing Nightcat Tiancheng Network Technology Co.

Beijing Night Cat Tiancheng Network Technology Co., Ltd. is a professional website design and website construction service provider in China. There is a SQL injection vulnerability in the website building system of Beijing Nite Owl Tiancheng Network Technology Co., Ltd. which can be exploited by...