SA-CONTRIB-2014-123 - Postal Code - Cross Site Scripting (XSS)

The Postal Code module enables you to implement postal code validation for several countries. The module doesn't sufficiently sanitize certain data in the admin thereby opening a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role...

Chinese Attackers Hack NOAA's Systems

Systems belonging to the National Oceanic and Atmospheric Administration NOAA were recently compromised, purportedly by Chinese hackers. The NOAA confirmed that four of the scientific agency’s websites were targeted and compromised in an “internet-sourced attack” earlier this fall, in a statement...

Unreal Engine 'UnChan.cpp' Failed Assertion Remote Denial of Service Vulnerability

漏洞成因： 没有正确处理内存分配异常，导致拒绝服务漏洞 下列使用了该引擎的应用存在漏洞： Unreal Tournament 3.1.3 Unreal Tournament 2003 Unreal Tournament 2004 Dead Man's Hand Pariah WarPath Postal 2 Shadow Ops exp： http://www.securityfocus.com/data/vulnerabilities/exploits/31205.zip 参考： http://www.securityfocus.com/bid/31205/exploit source...

AOL Breached, Investigating Spam from Spoofed Accounts

AOL reported today that it has been breached and urges users of its web-based email and other online services to change their passwords. AOL’s investigation of a breach of its internal network and systems is under way with the help of federal authorities and a forensics firm, the company said. La...

New Phishing attack targets Italian Postal and Financial service again

A phishing attack is a complex combination of technology and psychology. There are numerous ways in which people are being made fools and they can be conned by hitting on unsecured website links. Sophos experts detected this week an intriguing case of phishing against the Italian postal service...

New Phishing attack targets Italian Postal and Financial service again

A phishing attack is a complex combination of technology and psychology. There are numerous ways in which people are being made fools and they can be conned by hitting on unsecured website links. Sophos experts detected this week an intriguing case of phishing against the Italian postal service...

Google - (Pin via Postal Delivery) Information Disclosure

Document Title: =============== Google - Pin via Postal Delivery Information Disclosure References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1046 View: http://www.youtube.com/watch?v=nnAAdX9a3eU Release Date: ============= 2013-08-14 Vulnerability Laboratory ID VL-ID:...

Google - (Pin via Postal Delivery) Information Disclosure

Document Title: =============== Google - Pin via Postal Delivery Information Disclosure References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1046 View: http://www.youtube.com/watch?v=nnAAdX9a3eU Release Date: ============= 2013-08-14 Vulnerability Laboratory ID VL-ID:...

Postal savings banks the UKEY useless-vulnerability warning-the black bar safety net

Today to the postal Savings Bank postal savings bank of china to go to the opening of the postal green card through the online banking, in order to safeguard the Bank account of the funding security, the requirements for online banking opened UKEY protection, the Bank staff attitude good, and...

DEBIAN-CVE-2011-4079

Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service slapd crash via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry...

CATANIA Airport website hacked, MOROCCAN Suspected !

Catania - The Postal & Communications Police Department of Catania, coordinated by the city's DA office, has a suspect. The person investigated is a 22-year old Moroccan national residing in Lucca, who is considered to be responsible for the hacking attack that made inaccessible for a few hours t...

Unreal Engine - ReceivedRawBunch() Denial of Service

Unreal Engine - ReceivedRawBunch Denial of Service source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games whic...

Unreal Engine - 'ReceivedRawBunch()' Denial of Service

source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games which are developed with Unreal Engine are affected:...

Unfixed XSS vulnerability at www.crazyclip.tv

Security researcher postal, has submitted on 10/03/2008 a cross-site-scripting XSS vulnerability affecting www.crazyclip.tv, which at the time of submission ranked 2353947 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Unreal Engine - UnChan.cpp Failed Assertion Remote Denial of Service

Unreal Engine - UnChan.cpp Failed Assertion Remote Denial of Service source: https://www.securityfocus.com/bid/31205/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that us...

Unreal Engine - 'UnChan.cpp' Failed Assertion Remote Denial of Service

source: https://www.securityfocus.com/bid/31205/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that use the vulnerable engine and deny service to legitimate users. The...