628 matches found
wordpress plugin Germany-likes-opt-in-facebook cross-site scripting vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin Germany-likes-opt-in-facebook suffers from an xss vulnerability due to improper filtering of user input,...
DEBIAN-CVE-2016-9798
In BlueZ 5.42, a use-after-free was identified in "confopt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...
UBUNTU-CVE-2016-9798
In BlueZ 5.42, a use-after-free was identified in "confopt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...
'Web Of Trust' Browser Add-On Caught Selling Users' Data — Uninstall It Now
Browser extensions have become a standard part of the most popular browsers and essential part of our lives for surfing the Internet. But not all extensions can be trusted. One such innocent looking browser add-on has been caught collecting browsing history of millions of users and selling them t...
Wordpress plugin double-opt-in-for-download has multiple cross-site scripting vulnerabilities
double-opt-in-for-download is a Wordpress plugin that is used to capture the name and email address of visitors by offering a free download to the user's visitors in exchange for their email address with the Double Opt-In plugin! Wordpress plugin double-opt-in-for-download has an xss vulnerabilit...
Design/Logic Flaw
ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service assertion failure and daemon exit via malformed options data in an OPT resource record...
DEBIAN-CVE-2016-2848
ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service assertion failure and daemon exit via malformed options data in an OPT resource record...
CVE-2016-2848
ISC BIND vulnerability CVE-2016-2848 affects BIND 9.1.0–9.8.4-P2 and 9.9.0–9.9.2-P2, allowing remote attackers to cause a denial of service (assertion failure and daemon exit) by sending malformed options data in an OPT resource record. Exploitation is via specially crafted DNS packets; impact is...
WhatsApp to Share Your Data with Facebook — You have 30 Days to Stop It
Nothing comes for Free, as "Free" is just a relative term used by companies to develop a strong user base and then use it for their own benefits. The same has been done by the secure messaging app WhatsApp, which has now made it crystal clear that the popular messaging service will begin sharing...
Service worker meeting notes
On July 28th-29th we met up in the Mozilla offices in Toronto to discuss the core service worker spec. I'll try and cover the headlines here. Before I get stuck in to the meaty bits of the meeting, our intent here is to do what's best for developers and the future of the web, so if you disagree...
Facebook Messenger End-to-End Encryption Not On By Default
Facebook today began a test program rolling out opt-in end-to-end encryption for its Messenger service called Secret Conversations. The end-to-end encryption is based on the Signal protocol developed by Open Whisper Systems, the same protocol that stands up the crypto in the Signal and WhatsApp...
WordPress Double Opt-In for Download Plugin 2.0.9 - SQL Injection
This WordPress Double Opt-In for Download plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
WordPress Plugin Double Opt-In for Download 2.0.9 - SQL Injection
WordPress Plugin Double Opt-In for Download 2.0.9 - SQL Injection Exploit Title: Double Opt-In for Download 2.0.9 Sql Injection Date: 06-06-2016 Software Link: https://wordpress.org/plugins/double-opt-in-for-download/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website:...
WordPress Plugin Double Opt-In for Download 2.0.9 - SQL Injection
Exploit Title: Double Opt-In for Download 2.0.9 Sql Injection Date: 06-06-2016 Software Link: https://wordpress.org/plugins/double-opt-in-for-download/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description...
WordPress Double Opt-In For Download 2.0.9 SQL Injection
Exploit Title: Double Opt-In for Download 2.0.9 Sql Injection Date: 06-06-2016 Software Link: https://wordpress.org/plugins/double-opt-in-for-download/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description...
Facebook Messenger App — Choose either End-to-End Encryption or Artificial Intelligence
Facebook is set to introduce end-to-end encryption for its Messenger app, allowing more than its 900 Million users to send and receive messages that can not be read or intercepted by law enforcement or even the social network itself. However, it’s not the kind of end-to-end encrypted chat feature...
Facebook Ads now Tracks you, Even if you don't have an Account
There's nowhere to hide across the web, especially from the marketing and advertising companies. If you are paranoid about your privacy, you may get upset to know that Facebook will now track and deliver targeted Ads on other apps and websites for everyone, even if you do not have Facebook...
youronlinechoices.com XSS vulnerability
Vulnerable URL: http://www.youronlinechoices.com/optoutinterfacev2?lang=at'alert/XSSPOSED/...
ISC BIND 9.3.0 < 9.9.8-P3 / 9.9.x-Sx < 9.9.8-S4 / 9.10.x < 9.10.3-P3 Multiple DoS
According to its self-reported version number, the installation of ISC BIND running on the remote name server is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to improper handling of certain string formatting options. An authenticated,...
