61 matches found
scheiblhofer.at XSS vulnerability
Open Bug Bounty ID: OBB-667250 Description| Value ---|--- Affected Website:| scheiblhofer.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
kereso.startlap.hu XSS vulnerability
Open Bug Bounty ID: OBB-647937 Description| Value ---|--- Affected Website:| kereso.startlap.hu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Algeria Shut Down the Internet to Prevent Students from Cheating on Exams
Algeria shut the Internet down nationwide to prevent high-school students from cheating on their exams. The solution in New South Wales, Australia was to ban smartphones. EDITED TO ADD 6/22: Slashdot thread...
Webcast Replay: Preventing Vulnerability Exposure with IBM Security Bulletins
Abstract As the basis for many of IBM's enterprise products, WebSphere Application Server and its runtime often serves as the first line of defense when it comes to IT security. Learn how to ensure that you stay protected against known exploits through effective use of IBM's Security Bulletins...
New adware attack bombard phones & prevent users from disabling ads
By Waqas It is just another day for Android users who are This is a post from HackRead.com Read the original post: New adware attack bombard phones prevent users from disabling ads...
Ruby on Rails: ActionController::Parameters .each returns an unsafe hash
Rails 5.1.4 The goal of ActionController::Parameters's permit method strong parameters is to prevent accidental trust in the parameters sent by the client. We can therefore not simply create a hash of all the parameters in the params without permitting them first. When we really want to do this...
FTC Releases Alert on Identity Theft
The Federal Trade Commission FTC has released an alert about how quickly criminals begin using your personal information once it is posted to a hacker site by an identity thief. FTC researchers found that it can take as few as 9 minutes for crooks to access stolen personal information posted to...
Pushwoosh: Clickjacking
Steps to reproduce: create index.html file with following content: Open index.html in browser Actual result: Pushwoosh viewed in iframe. Expected result: do not allow clickjacking Root cause: var isInIFrame = function try return window.self !== window.top; catch e return true; ;...
Unbreakable Enterprise kernel security update
kernel-uek 4.1.12-61.1.17 - sched: panic on corrupted stack end Jann Horn Orabug: 24971921 CVE-2016-1583 - ecryptfs: forbid opening files without mmap handler Jann Horn Orabug: 24971921 CVE-2016-1583 - proc: prevent stacking filesystems on top Jann Horn Orabug: 24971921 CVE-2016-1583...
BFS-SA-2015-002: OpenSSH PAM Privilege Separation Vulnerabilities
Blue Frost Security GmbH https://www.bluefrostsecurity.de/ researchatbluefrostsecurity.de BFS-SA-2015-002 13-August-2015 Affected Product: OpenSSH http://www.openssh.com Affected Version: Portable versions = 6.9p1 Vulnerability: Vulnerabilities in PAM Privilege Separation Code I. Impact Two...
IT-Grundschutz M4.022: Verhinderung des Vertraulichkeitsverlusts schutzbedürftiger Daten im Unix-System
IT-Grundschutz M4.022: Verhinderung des Vertraulichkeitsverlusts schutzbedürftiger Daten im Unix-System. Stand: 14. Ergänzungslieferung 14. EL. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...
Going Back to the Future in the Name of Better Security
NEW YORK–If Bill Cheswick had his way, the future of computing and computer security would look a lot like the distant past, with trusted platforms, small programs, applications that can’t affect the operating system and resistance to user mistakes. Cheswick, a former Bell Labs computer scientist...
NSA Chief, General Alexander defends US surveillance programs as a Noble Mission
On Wednesday, Chief of National Security Agency NSA, General Keith Alexander defended US surveillance programs as part of a Noble Mission to protect the nation. He said that the collection of bulk phone records by U.S. Intelligence agencies are essential to preventing terrorist attacks. He...
Officials Call NSA PRISM Leaks 'Egregious', Say Program Has Foiled Many Terror Plots
Speaking before the House Intelligence Committee on Tuesday, senior intelligence and law enforcement officials said that the FISA-authorized collection of telephone records and other data revealed by Edward Snowden’s leaks has prevented more than 50 terror attacks against the United States since...
Fedora 15 : bind-9.8.0-5.P2.fc15 (2011-7617)
This update fixes CVE-2011-1910 : - large RRSIG RRsets and negative caching can crash named Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
The Year of the Sandbox
As predicted by researcher Dino Dai Zovi in these pages in January, 2010 turned out to be the year of the sandbox. Attackers for years have been focusing their attention on browsers and other Web apps and using them as jumping off points for further attacks on compromised PCs. Vendors finally beg...
Mandriva Update for openafs MDVSA-2008:207 (openafs)
Check for the Version of openafs OpenVAS Vulnerability Test Mandriva Update for openafs MDVSA-2008:207 openafs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Next injection protection cross-site scripting request spoofing(CSRF)-vulnerability warning-the black bar safety net
Author: superhei, 出处 :ph4nt0m.org CSRFCross-site Request Forgery,cross-site request cheat in the past year nn2always fire, however, CSRF is very difficult to completely prevent, following some of my Bypass Preventingside note CSRF tricks...... CSRFCross-site Request Forgery,cross-site request che...
kernel security update
2.4.21-47.0.1.EL - fix buflen assignment for DVD BDA read requests Chip Coldwell - prevent write permission w/read-only shm segments Ernie Petrides - fix clock drift by disabling C1 clock ramping on AMD Prarit Bhargava - prevent possible deadlock with shmat/shm-rmid races Sachin Prabhu - prevent...