Friday Squid Blogging: How the Optic Lobe Controls Squid Camouflage

Experiments on the oval squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Friday Squid Blogging: Using Squid Ink to Detect Gum Disease

A new dental imagery method, using squid ink, light, and ultrasound. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Facebook worries: I didn’t post that

It is my assumption that most Facebook users don’t look at their own profile often. With your own profile, I mean the timeline that shows up when you click your own name or avatar in the Facebook menu. That’s because we think we know exactly what is posted there, so why bother to look at it? Afte...

Friday Squid Blogging: Brittle Star Catches a Squid

Watch a brittle star catch a squid, and then lose it to another brittle star. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Friday Squid Blogging: Why It's Hard to Track the Squid Population

Counting squid is not easy. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

CVE-2016-6342

elog 3.1.1 allows remote attackers to post data as any username in the logbook...

CVE-2016-6342

Summary: CVE-2016-6342 affects the Erlang logging library elog version 3.1.1, enabling remote attackers to publish data in the logbook under any username. This is documented across multiple sources, including NVD/NIST, CNVD, OSV, and vendor advisories. Impact: Allows a remote attacker to post dat...

PT-2017-8970 · Elog · Elog

Name of the Vulnerable Software and Affected Versions: elog version 3.1.1 Description: The issue allows remote attackers to post data as any username in the logbook. Recommendations: For elog version 3.1.1, at the moment, there is no information about a newer version that contains a fix for this...

Friday Squid Blogging: Squids from Space Video Game

An early preview. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

File Upload Bypass Vulnerability in Pivotx CMS Article Posting Page

PivotX CMS is an open source blog content management system Blog CMS. Pivotx CMS 2.3.11 and previous versions of the article publishing page file upload bypass vulnerability , due to fileupload.php file of $disallowedextensions filter array has a design flaw , an attacker can exploit the...

CVE-2017-5491

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name...

UBUNTU-CVE-2017-5491

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name...

CVE-2017-5491

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name...

CVE-2017-5491

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name...

Mini Notice Board 1.1 Cross Site Scripting

mininoticeboardv1.1 XSS Vulnerabilities ========================================= Discovered by NA, NAattutanota.com ======================================= Vendor has been notified Description ============ Mini Notice Board is a small noticeboard application that allows users to post notice card...

Joomla com_jsjobs SQL injection Vulnerability

Exploit for php platform in category web applications |✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚ !! Exploit Title : Joomla comjsjobs SQL injection Vulnerability !! Exploit Author : xBADGIRL21 !! Dork : inurl:index.php?option=comjsjobs !! Vendor Homepage : http://www.joomsky.com !! MyBlog :...

Joomla JSJobs 1.0.7.5 SQL Injection

|\aaaaaaaaaaaaaaaaaaaaaaa !! Exploit Title : Joomla comjsjobs SQL injection Vulnerability !! Exploit Author : xBADGIRL21 !! Dork : inurl:index.php?option=comjsjobs !! Vendor Homepage : http://www.joomsky.com !! MyBlog : http://xbadgirl21.blogspot.com/ !! version : 1.0.7.5 !! Tested on: BackBox !!...

CVE-2016-4422

The pamsmauthenticate function in pamsshauth.c in libpam-sshauth might allow context-dependent attackers to bypass authentication or gain privileges via a system user account...

CVE-2015-8485

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8486, and CVE-2016-1152...

CVE-2015-8485

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8486, and CVE-2016-1152...