WordPress CopySafe Web Protect plugin <=2.5 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF vulnerability in WordPress CopySafe Web Protect plugin allows an attacker to change the plugin settings. Solution Update WordPress CopySafe Web Protect plugin to the latest available version at least version 2.6...

WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery

2.6 realease --...

Database Firewall: DBShield

Database Firewall DBShield is a Database Firewall written in Go that has protection for MySQL/MariaDB, Oracle and PostgreSQL databases. It works in a proxy fashion inspecting traffic and dropping abnormal queries after a learning period to populate the internal database with regular queries. For...

CVE-2016-8940

IBM Tivoli Storage Manager IBM Spectrum Protect 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these...

CVE-2016-8940

CVE-2016-8940 affects IBM Tivoli Storage Manager (IBM Spectrum Protect) servers. The IBM Security Bulletin and IBM/NVD entries describe an inadequate authority check on SQL queries, allowing an administrator to access product-specific database tables not meant for access, potentially exposing pas...

CVE-2016-8940: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Storage Manager IBM Spectrum Protect 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. The access of these...

IBM Spectrum Protect Server 7.1.1.0 - 7.1.7.0 SELECT Command RCE

IBM Spectrum Protect, formerly known as Tivoli Storage Manager, installed on the remote host is version 7.1.1.0 through 7.1.7.0. It is, therefore, affected by a buffer overflow condition when handling the SELECT command in a SQL query due to improper validation of input. An authenticated, remote...

CVE-2016-8508

Yandex Browser for desktop before 17.1.1.227 does not show Protect similar to Safebrowsing in Chromium warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site...

Design/Logic Flaw

Yandex Browser for desktop before 17.1.1.227 does not show Protect similar to Safebrowsing in Chromium warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site...

CVE-2016-8508

Yandex Browser for desktop before 17.1.1.227 does not show Protect similar to Safebrowsing in Chromium warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site...

CVE-2016-8508

CVE-2016-8508 affects Yandex Browser for desktop prior to 17.1.1.227. The issue is that the browser does not show Protect warnings (analogous to Safebrowsing) for web-sites with certain content-types, which could allow a remote attacker to silence protection warnings on a malicious site. The vuln...

CVE-2016-8508

Yandex Browser for desktop before 17.1.1.227 does not show Protect similar to Safebrowsing in Chromium warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site...

CVE-2016-8508: Undefined Security Weakness

Yandex Browser for desktop before 17.1.1.227 does not show Protect similar to Safebrowsing in Chromium warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site...

PT-2017-4190

Name of the Vulnerable Software and Affected Versions Yandex Browser for desktop versions prior to 17.1.1.227 Description The issue is related to errors in security settings of the Protect technology in Yandex Browser, which can be exploited by a remote attacker to hide notifications about...

Windows/x86 - Protect Process Shellcode (229 bytes)

/ Win32 - Protect Process Shellcode Date: 17.02.2017 Author: Ege Balcı Tested on: Win 7/8/8.1/10 This shellcode sets the SEDACLPROTECTED flag inside security descriptor structure, this will prevent the process being terminated by non administrative users...

CVE-2016-5985

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

CVE-2016-5985

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

CVE-2016-5985: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

PT-2017-8840

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager IBM Spectrum Protect affected versions not specified Description The issue concerns a buffer overflow that occurs when Journal-Based Backup is enabled. This could allow a local attacker to execute arbitrary code on t...

Source Code for another Android Banking Malware Leaked

Another bad news for Android users — Source code for another Android banking malware has been leaked online via an underground hacking forum. This newly discovered banking Trojan is designed to steal money from bank accounts of Android devices' owners by gaining administrator privileges on their...