Remote Code Execution (RCE)

nightmare is vulnerable to a remote code execution RCE vulnerability. This is because the nightmare object is set on the window object. This gives access to the core electron features to every website. This could be leveraged to perform man-in-the-middle MitM attacks and RCE attacks through its I...

NSA wants to Exploit Internet of Things and Biomedical Devices

The cyber attack vectors available to hackers will continue to grow as the Internet of Things IoTs become more commonplace, making valuable data accessible through an ever-widening selection of entry points. Although it's not the hackers alone, the NSA is also behind the Internet of Things. We...

Advanced Malware targeting Internet of the Things and Routers

Anything connected to the Internet could be hacked and so is the Internet of Things IoTs. The market fragmentation of IoTs or Internet-connected devices is a security nightmare, due to poor security measures implemented by their vendors. Now, the researchers at security firm ESET have discovered ...

Saudi hacker target Israeli stock exchange and National air carrier

Saudi hacker target Israeli stock exchange and National air carrier Saudi cyber Hacker OxOmar struck again on Monday. This time disrupted the websites of Israel's stock exchange and National air carrier. Last week he had leaked private information about more than 400,000 Israelis. Credit card...

ezPack 4.2b2 XSS / SQL Injection

+++++++++++ EZpack XSS/SQL Vulnerability ++++++++++ ProDuct Name : EZpack Download : http://www2.se-ed.net/fatcoder/?mode=download Author : !-BUGJACK-! Site : www.it-dark.com ++ SQL http://localhost/ezPack/op=prog&mdfd=webboard&act=1&ID=1&qType=ID+SQL + XSS http://localhost/ezPack/?op=prog&mdfd=X...

[SA18159] Information Call Center "CallCenterData.mdb" Exposure of User Credentials

TITLE: Information Call Center "CallCenterData.mdb" Exposure of User Credentials SECUNIA ADVISORY ID: SA18159 VERIFY ADVISORY: http://secunia.com/advisories/18159/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Information Call Center...

SmartPPCProXSS.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 017 ------------------------------------------------------ Date - 11/2005 SmartPPC Pro Xss AFFECTED PRODUCTS ================= SmartPPC Pro http://www.orbitscripts.com Overview: ======== SmartPPC Standard is a...

[SA17736] SmartPPC Pro "username" Cross-Site Scripting Vulnerability

TITLE: SmartPPC Pro "username" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA17736 VERIFY ADVISORY: http://secunia.com/advisories/17736/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: SmartPPC Pro http://secunia.com/product/6215/ DESCRIPTION: BiPiHaC...

eQuickSQLXSS.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 016 ------------------------------------------------------ Date - 11/2005 e-Quick Cart Sql & Xss AFFECTED PRODUCTS ================= e-Quick Cart http://www.cdmweb.com Xss Poof: ========...

EasyPageCMSXSS.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 015 ------------------------------------------------------ Date - 11/2005 EasyPageCMS Cross Site Scripting AFFECTED PRODUCTS ================= EasyPageCMS http://www.davehusk.com Xss Poof: ======== poof:...

[SA17306] Zomplog Cross-Site Scripting and SQL Injection Vulnerabilities

TITLE: Zomplog Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17306 VERIFY ADVISORY: http://secunia.com/advisories/17306/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Zomplog 3.x...

guestbookInject.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 010 ------------------------------------------------------ Date - 10/2005 @lex Guestbook 3.3 XSS & CRLF injection AFFECTED PRODUCTS ================= @lex Guestbook http://www.alexphpteam.com OVERVIEW ======== Nice...

vlbook10.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 005 ------------------------------------------------------ Date - 10/2005 vlbook Remote File Inclusion AFFECTED PRODUCTS ================= vlbook 1.0 Guestbook http://vlbook.com/ OVERVIEW ======== he vlbook is a free,...

eguestproXSSSQL.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 004 ------------------------------------------------------ Date - 11/2005 EGuest PRO AFFECTED PRODUCTS ================= EGuest PRO 4.0 Guestbook http://www.esoftpro.com/product.php?pid=eguestpro OVERVIEW ========...

xueBookSQL.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 003 ------------------------------------------------------ Date - 11/2005 xueBook 1.0 Sql Injection AFFECTED PRODUCTS ================= xueBook 1.0 Guestbook...