Reliance Jio Customers' Data Allegedly Hacked – Company Denies Breach

Personal details of some 120 Million customers have been allegedly exposed on the Internet in probably the biggest breach of personal data ever in India. Last night, an independent website named Magicapk.com went online, offering Reliance Jio customers to search for their identification data Know...

Path Traversal

morepath is vulnerable to path traversal. It does correctly normalize dots in the request path as it relies on the client to do it...

OpenSSH < 7.0 Multiple Vulnerabilities

Binary data 9309.prm...

India temporarily Bans Facebook's Free Internet Service

Facebook's Free Internet access to India has hit a hurdle: The Telecom Regulatory Authority of India TRAI has ordered the mobile carrier to temporary suspend the Facebook's Free Basics Internet program. Facebook's Free Basics is an app that allows users to access certain Internet websites,...

GEOVAP Reliance 4 Control Server Privilege Escalation Vulnerability

GEOVAP Reliance 4 Control Server suffers from an unquoted search path issue impacting the service 'RelianceOpcDaWrapper' for Windows deployed as part of Reliance 4 SCADA/HMI system installer including Reliance OPC Server. This could potentially allow an authorized but non-privileged local user to...

GEOVAP Reliance 4 Control Server Privilege Escalation

GEOVAP Reliance 4 Control Server Unquoted Service Path Elevation Of Privilege Vendor: GEOVAP, spol. s r.o. Product web page: http://www.geovap.cz http://www.reliance.cz http://www.reliance-scada.com Affected version: 4.7.1 Revision 25172 Summary: Reliance is a professional SCADA/HMI system...

GEOVAP Reliance 4 Control Server Unquoted Service Path Elevation Of Privilege

Summary Reliance is a professional SCADA/HMI system designed for the visualization and control of industrial processes and for building automation. Description The application suffers from an unquoted search path issue impacting the service 'RelianceOpcDaWrapper' for Windows deployed as part of...

relianceiccrankings.com XSS vulnerability

Vulnerable URL: http://www.relianceiccrankings.com/ranking/odi/batting/?name=%3CIMG+%22%22%22%3E%3CSCRIPT%3Ealert%28%22XSSPOSED%22%29%3C%2FSCRIPT%3E%22%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:35 GMT Vulnerability type:| XSS...

relianceiccrankings.com XSS vulnerability

Vulnerable URL: http://www.relianceiccrankings.com/ranking/test/bowling/?name=%3CIMG+%22%22%22%3E%3CSCRIPT%3Ealert%28%22XSSPOSED%22%29%3C%2FSCRIPT%3E%22%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:35 GMT Vulnerability type:| XSS...

CVE-2015-6744

Basware Banking Maksuliikenne before 8.90.07.X relies on the client to enforce 1 login verification, 2 audit trail creation, and 3 account locking, which allows remote attackers to "disrupt security-critical functions" by "dropping network traffic." NOTE: this identifier was SPLIT from...

CVE-2015-6744

Basware Banking (Maksuliikenne) before 8.90.07.X relies on client-side enforcement of login verification, audit trail, and account locking, enabling a remote attacker to disrupt security-critical functions by dropping network traffic. Connected sources (CNVD/NVD family) describe this issue under ...

FreeBSD : RT -- two XSS vulnerabilities (83b38a2c-413e-11e5-bfcf-6805ca0b3d42)

Best Practical reports : RT 4.0.0 and above are vulnerable to a cross-site scripting XSS attack via the user and group rights management pages. This vulnerability is assigned CVE-2015-5475. It was discovered and reported by Marcin Kopec at Data Reliance Shared Service Center. RT 4.2.0 and above a...

RT -- two XSS vulnerabilities

Best Practical reports: RT 4.0.0 and above are vulnerable to a cross-site scripting XSS attack via the user and group rights management pages. This vulnerability is assigned CVE-2015-5475. It was discovered and reported by Marcin Kopec at Data Reliance Shared Service Center. RT 4.2.0 and above ar...

Black Hat BLEKey RFID Access Control Hack

LAS VEGAS – A device the size of a quarter that can be installed in 60 seconds on a proximity card reader could potentially be used to break physical access controls in 80 percent of deployments. The device, dubbed BLEKey, is used to read cleartext data sent from card readers to door controllers ...

Mastery oa at the secondary injection vulnerability-vulnerability warning-the black bar safety net

Brief description: Paralysis of the software Detailed description: ! QQ 图片 20141215110029.jpg Add the attention of the people, many functions rely on the data code area POST http://121.40.134.14/general/personinfo/concernuser/update.php HTTP/1.1 Host: 121.40.134.14 Connection: keep-alive...

Facebook Launches Free Mobile Internet Service In India

Last year, the founder of the Social Network giant highlighted the future of universal Internet access, the dream that Facebook founder Mark Zuckerberg wants to fulfill — Making Internet access available to everyone across the world just like a service as essential as of 911 in the case of an...

汇文手机图书馆不用密码获取用户信息

简要描述： 生成认证token，只用用户名即可获取用户信息 详细说明： 将用于认证的token的生成方式在客户端实现且生成方式与密码无关 影响院校列表 http://www.libsys.com.cn/huiwenappcenter2.php 漏洞证明： import java.io.UnsupportedEncodingException; import java.math.BigInteger; / Created by snail on 14-11-23. / public class LibToken public static String makeTokenString s...

Experts Worry About Future of Critical Infrastructure Security

SAN FRANCISCO–The problem of critical infrastructure security has become a key issue in the last few years, as high-profile attacks such as Stuxnet and others have grabbed headlines and alerted politicians and others to the weaknesses facing these vital systems. It’s an issue that Eugene Kaspersk...

TopTV and Reliance Netconnect websites hacked by Brazilian hackers

The TopTV website and Reliance Netconnect broadband provider websites compromised today by Brazilian hacking crew named "HighTech Brazil HackTeam". Index.php from Reliance Netconnect and few internal pages of TopTV defaced. Heather Kennedy from TopTV said that they are aware of the breach of...

TopTV and Reliance Netconnect websites hacked by Brazilian hackers

The TopTV website and Reliance Netconnect broadband provider websites compromised today by Brazilian hacking crew named "HighTech Brazil HackTeam". Index.php from Reliance Netconnect and few internal pages of TopTV defaced. Heather Kennedy from TopTV said that they are aware of the breach of...