68 matches found
A Bootiful Podcast: Spring Security lead Rob Winch on the amazing Spring Security 6.4 release
Hi, Spring fans! In this installment, we'll talk to the amazing Rob Winch, lead of Spring Security 6.4, about the jam-packed new release! spring springboot security java...
Spring Tips: Spring Security method security with special guest Rob Winch
Hi, Spring fans! In this installment I have special guest Spring Security lead Rob Winch give us a master class in how the method security support works and some of its new features. Come for the security, stay for the incredible opportunity to look over a senior engineer's shoulders as he explai...
robdns security breach
robdns is a dns service. A security vulnerability exists in robdns, which originates from a heap overflow via the component block-filename at /src/zonefile-insertion.c. The vulnerability is caused by the component block-filename...
CVE-2024-31085
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rob Marsh, SJ Post-Plugin Library allows Reflected XSS.This issue affects Post-Plugin Library: from n/a through 2.6.2.1...
CVE-2024-31085
CVE-2024-31085 is a Reflected XSS in the WordPress plugin Post-Plugin Library (aka Rob Marsh, SJ Post-Plugin Library). The vulnerability stems from improper neutralization of user input during web page generation, enabling an attacker-controlled payload to be reflected in responses. Affected vers...
Suspected Russian Data-Wiping 'AcidPour' Malware Targeting Linux x86 Devices
A new variant of a data wiping malware called AcidRain has been detected in the wild that's specifically designed for targeting Linux x86 devices. The malware, dubbed AcidPour, is compiled for Linux x86 devices, SentinelOne's Juan Andres Guerrero-Saade said in a series of posts on X. "The new...
A Bootiful Podcast: Spring Security lead Rob Winch
Hi, Spring fans! Welcome to another installment of a Bootiful Podcast. In this interview, Josh Long @starbuxman talks to Spring Security legend and lead Rob Winch @robwinch, recorded live from SpringOne 2023!...
NSA Cybersecurity Director Says ‘Buckle Up’ for Generative AI
The security issues raised by ChatGPT and similar tech are just beginning to emerge, but Rob Joyce says it’s time to prepare for what comes next...
rob-taurus.cz Cross Site Scripting vulnerability OBB-3098892
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SolarWinds Orion Secrets Dump
This module exports and decrypts credentials from SolarWinds Orion Network Performance Monitor NPM to a CSV file; it is intended as a post-exploitation module for Windows hosts with SolarWinds Orion NPM installed. The module supports decryption of AES-256, RSA, and XMLSEC secrets. Separate action...
CVE-2020-19769
A lack of target address verification in the BurnMe function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script...
CVE-2020-19769
A lack of target address verification in the BurnMe function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script...
Design/Logic Flaw
A lack of target address verification in the BurnMe function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script...
CVE-2020-19769
CVE-2020-19769 : A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script. Affected software: Rob The Bank 1.0 (BurnMe() function). Root cause: missing target address verification. Impact: token thef...
Rob The Bank 数据伪造问题漏洞
Rob The Bank is a music website. Rob The Bank suffers from a data forgery issue vulnerability that stems from the lack of destination address validation in the BurnMe function in Rob The Bank version 1.0, which allows an attacker to steal tokens from victimized users via a carefully crafted scrip...
Debian DSA-4911-1 : chromium - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2021-21227 Gengming Liu discovered a data validation issue in the v8 JavaScript library. - CVE-2021-21228 Rob Wu discovered a policy enforcement error. - CVE-2021-21229 Mohit Raj discovered a user interface error in t...
Rob Joyce to Take Over as NSA Cybersecurity Director
As the incoming Biden administration continues to shake up federal leadership, the National Security Agency announced Friday that Rob Joyce, who is currently serving at the U.S. Embassy in London, was named to lead its cybersecurity division. Joyce will inherit the job from Anne Neuberger, who wi...
robplummer.com Cross Site Scripting vulnerability OBB-1284831
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Valak Loader Revamped to Rob Microsoft Exchange Servers
Threat actors have revamped a popular malware loader into a stealthy infostealer that targets Microsoft Exchange servers to pilfer enterprise mailing information, passwords and enterprise certificates, researchers have found. Security researchers from Cybereason Nocturnus have discovered Valak, a...
Citrix ADC (NetScaler) Directory Traversal RCE
This module exploits a directory traversal in Citrix Application Delivery Controller ADC, aka NetScaler, and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0, to execute an arbitrary command payload. Module Options msf use exploit/freebsd/http/citrix/dirtraversalrce msf undefineddirtraversalrce show...