716 matches found
hydraulicspressindia.com XSS vulnerability
Vulnerable URL: http://hydraulicspressindia.com/details.php?cid=hack%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...
pia.ca.gov XSS vulnerability
Open Bug Bounty ID: OBB-289707 Description| Value ---|--- Affected Website:| pia.ca.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Beware of Security by Press Release
On Wednesday, the security industry once again witnessed an all-too-familiar cycle: I call it "security by press release." It goes a bit like this: A security firm releases a report claiming to have unearthed a major flaw in a competitor's product; members of the trade press uncritically republis...
vernonpress.com XSS vulnerability
Vulnerable URL: https://vernonpress.com/title.php?id=18"head...
Server-Side Request Forgery (SSRF)
WordPress is vulnerable to server-side request forgery SSRF attacks. The attacks exist because it bypasses the validation of GET request by using URL http://xxx.xxx.xxx.xxx/wp-admin/press-this.php?u=URLTOSCRAPE&url-scan-submit;=Scan which has a zero value in the first octet of an IPv4 address in...
Meet with Wallarm at BlackHat USA 2017
Meet Wallarm team at BlackHat USA 2017 Start your day with a good cup of coffee and a hearty breakfast at PRESS lounge. Join Wallarm team for breakfast on the last day of BlackHat conference. Meet and network with like-minded white hat security professionals while fueling up for another day of...
Threat Actors Target Chinese Language News Sites
A California-based news website covering China, called China Digital Times, was targeted in a spying campaign that involved phishing lures and the use of the NetWire remote access Trojan. The attacks began in February 2017 and were part of a wider campaign of phishing, reconnaissance and malware...
camachinetools.com XSS vulnerability
Vulnerable URL: http://www.camachinetools.com/machines.php?for-sale=Press%20Brake=Used=1"...
Fighting Leakers at Apple
Apple is fighting its own battle against leakers, using people and tactics from the NSA. According to the hour-long presentation, Apple's Global Security team employs an undisclosed number of investigators around the world to prevent information from reaching competitors, counterfeiters, and the...
schaeffler.de XSS vulnerability
Vulnerable URL:...
Intel Active Management Technology Privilege Escalation Vulnerability
On May 1st, 2017, Intel released a security advisory titled Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Escalation of Privilege, also known as INTEL-SA-00075. The advisory details a vulnerability in the Intel Active Management AMT, Intel...
The US Charging Julian Assange Could Put Press Freedom on Trial
No matter your feelings on Assange or WikiLeaks, espionage charges against the group would represent a serious blow to press freedom. The post The US Charging Julian Assange Could Put Press Freedom on Trial appeared first on WIRED...
Akhbarona Press - أخبارنا - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Akhbarona Press - أخبارنا published at the 'play' market has multiple vulnerabilities...
proxybay.press XSS vulnerability
Vulnerable URL: https://proxybay.press/policy"--!"KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 388556 VIP website status:| No Check proxybay.press SSL connection:| Grade: ...
Media Acceleration Enhances Online Experiences for OTT Video, Games and Software Downloads
Online audiences are growing and so are their expectations for the quality of experience. You know exactly what I mean if you've ever been frustrated with the rate at which a game is downloading or if your video stalls at the most inopportune time. Online streaming is no longer novel, it's the...
WordPress Cross-Site Request Forgery Vulnerability (CNVD-2017-03558)
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the wp-admin/includes/class-wp-press-this.php page in...
CVE-2017-6819
In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...
CVE-2017-6819
In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...
Cross site request forgery (csrf)
In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...
CVE-2017-6819
In WordPress before 4.7.3, there is cross-site request forgery CSRF in Press This wp-admin/includes/class-wp-press-this.php, leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This...