White House Hires First Federal CISO

The White House announced yesterday it has hired retired Brigadier General Gregory J. Touhill, right, to serve as the first federal chief information security officer. Touhill will be responsible for setting policies, strategies and practices across federal agencies. According to a White House bl...

vianet.com.np XSS vulnerability

Vulnerable URL: https://www.vianet.com.np/sme-plan-form/?product=FiberNet-Infinite-OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 134792 VIP website status:| No Check...

One Way to Boost Proactive Cybersecurity

Its clear from media articles that new CISOs need to make an immediate impact on their organizations security program in the first 90 days with action items such as "make a quarterly plan for the next year"...

H.I.S. PLAN！WEBで作ったプランを持ち歩けます。 - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application H.I.S. PLAN！WEBで作ったプランを持ち歩けます。 published at the 'play' market has multiple vulnerabilities...

FlashFXP v5.3.0 (Win) - Memory Corruption Vulnerability

Document Title: =============== FlashFXP v5.3.0 Win - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1853 Release Notes: https://www.flashfxp.com/history-latest FlashFXP v5.4.0.3935 Release Date: ============= 2016-06-12...

Hacker Steals Money from Bank and Donates $11,000 to Anti-ISIS Group

Meet this Robin Hood Hacker: Phineas Fisher, who breached Hacking Team last year, revealed on Reddit Wednesday that he hacked a bank and donated the money to Kurdish anti-capitalists in Rojava autonomous region in northern Syria that borders territory held by the ISIS Islamic State militant group...

FAQ: Apple's Device Enrollment Program and Citrix Secure Hub Auto Install

Q: How to download and install Citrix Secure Hub automatically during DEP initial setup without the user searching the AppStore? A : The capability to install Secure Hub during DEP initial setup of a device is supported with XenMobile 10.3.x Server and later: All you need to do is to push the...

ILas图书馆自动化集成系统 NTReaderCritic.aspx等2处 时间盲注漏洞

0x01漏洞简介 ILas图书馆自动化集成系统在NTReaderCritic.aspx和NTUniBookRetrInfo.aspx两个页面存在时间延迟注入漏洞。 0x02漏洞详情 NTReaderCritic.aspx sqlmap -u ".../NTReaderCritic.aspx?strRenco=1&strTitle=1" 相关代码如下： protected void PageLoadobject sender, EventArgs e if !base.IsPostBack if base.Request.QueryString"strRenco" != null &&...

emeals.com XSS vulnerability

Vulnerable URL: http://emeals.com/meal-plans/plan-sample-popup.php?name=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 69622 VIP...

Floor Plan Creator - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Floor Plan Creator published at the 'play' market has multiple vulnerabilities...

PostgreSQL 9.5.x < 9.5.2 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 9.5.x prior to 9.5.2. It is, therefore, affected by multiple vulnerabilities : - A flaw exists that is triggered when a query plan is incorrectly reused for more than one ROLE within the same session. An authenticated, remote attacker can...

Noom Coach: Weight Loss Plan - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Noom Coach: Weight Loss Plan published at the 'play' market has multiple vulnerabilities...

Flight Routes / Flight Plan - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Flight Routes / Flight Plan published at the 'play' market has multiple vulnerabilities...

3D Small Home Plan Ideas - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application 3D Small Home Plan Ideas published at the 'play' market has multiple vulnerabilities...

Best 3D Home Plan - GPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Best 3D Home Plan published at the 'play' market has multiple vulnerabilities...

My Budget Plan - Customized SSL, MIT license, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application My Budget Plan published at the 'play' market has multiple vulnerabilities...

Vulnerability in core server (CVE-2016-2193)

Plan cache might use wrong role context for RLS policy...

Cybozu Office Security Mechanism Bypass Vulnerability (CNVD-2016-01260)

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A security mechanism bypass vulnerability exists in Cybozu Office versions 9.9.0 through 10.3.0, which can be exploited by a remote, authenticated user to bypass established access restrictions and read or writ...

Cybozu Office Security Mechanism Bypass Vulnerability (CNVD-2016-01257)

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A security mechanism bypass vulnerability exists in Cybozu Office versions 9.9.0 through 10.3.0, which can be exploited by a remote, authenticated user to bypass established access restrictions and read or writ...

Cybozu Office Security Mechanism Bypass Vulnerability (CNVD-2016-01258)

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A security mechanism bypass vulnerability exists in Cybozu Office versions 9.9.0 through 10.3.0, which can be exploited by a remote, authenticated user to bypass established access restrictions and read or writ...