1351 matches found
Win Apple's iPhone 6 For Free – A New Facebook Scam
Apple's iPhone 6 FREE ? Of course not ! It’s only a hoax, but scammers have announced the just release iPhone 6 free. Another Facebook scam is circulating across the popular social networking website just days after Apple unveiled its upcoming iPhone 6 and iPhone 6 Plus, as scammers take advantag...
Uninit memory disclosure via truncated images in Firefox
Yello, The recent release of Firefox 32 fixes another interesting image parsing issue found by afl 1: following a refactoring of memory management code, the past few versions of the browser ended up using uninitialized memory for certain types of truncated images, which is easily measurable with ...
Cobham Aviator satellite terminals contain multiple vulnerabilities
Overview Cobham Aviator 700D and 700E satellite terminals contain multiple vulnerabilities. Description Cobham Aviator 700D and 700E satellite communication terminals contain the following vulnerabilities:CWE-327:Use of a Broken or Risky Cryptographic Algorithm - CVE-2014-2942 Please note that th...
Local file inclusion in core - ownCloud
Due to an improper control of the filename for a requireonce statement in the routing component a limited local file inclusion vulnerability is existent in all below mentioned ownCloud versions. Depending on the ownCloud configuration and the authentication state of a remote attacker this...
Tccms sql注入一枚。（绕过防护机制）
简要描述： rt 详细说明： 直接看到/app/model/attackAction.class.php这个文件 public function initLogHacker /get/ foreach$GET as $key=$value if !inarray$key, array'ac','a','c','do'//防止控制器和方法命名不规范被过滤 $this-StopAttack$key,$value,"get",$this-getfilter; $GET$key = StringUtil::safereplace$value; $GET$key =...
Nagios Plugins check_dhcp 2.0.2 - Arbitrary Option File Read Race Condition
============================================= - Release date: 28.06.2014 - Discovered by: Dawid Golunski - Severity: Moderate ============================================= I. VULNERABILITY ------------------------- checkdhcp - Nagios Plugins = 2.0.2 Race Condition II. BACKGROUND...
PT-2014-1973
Name of the Vulnerable Software and Affected Versions Intel Ethernet diagnostics driver versions prior to 1.3.1.0 Description The Intel Ethernet diagnostics driver contains a flaw due to insufficient input validation when processing IOCTL calls 0x80862013, 0x8086200B, 0x8086200F, 0x80862007...
Join 'Reset The Net' Global Movement to Shut Off NSA Surveillance
Privacy of Internet users is dead somewhere as the Intelligence agencies can watch our every move, hear our every conversation and read our every email and find out anything related to our personal and private life. Last year, Edward Snowden revealed about the mass surveillance carried out by NSA...
New Point-of-Sale Malware Compromises 1,500 Devices Worldwide
In past few months, the malware developers are more focusing on proliferating and upgrading malicious malwares to target Point-of-Sale POS machines. Due to the lack of concern and security measures, point-of-sale POS systems have become an attractive target for cybercriminals and malware writers...
Yokogawa Centum Buffer Overflow Vulnerability
OVERVIEW Researcher group Rapid7 has identified a buffer overflow vulnerability in Yokogawa CENTUM products. Yokogawa has produced a patch that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Yokogawa reports that the vulnerability affects the...
Worst Data Breach in German History, 18 Million Email Passwords Compromised
Germany has confirmed its biggest Data theft in the country's history with usernames and passwords of some 18 million email accounts stolen and compromised by hackers. The Story broke by the German press, Der Spiegel on Thursday, when German Authorities revealed another mass hacking of private da...
The EICAR Encoder
This encoder merely replaces the given payload with the EICAR test string. Note, this is sure to ruin your payload. Any content-aware firewall, proxy, IDS, or IPS that follows anti-virus standards should alert and do what it would normally do when malware is transmitted across the wire. This modu...
Upload vulnerability science[1]-The file upload form is Web Security the main threat-vulnerability warning-the black bar safety net
In order to allow the end user to upload files to your website, just like Is to compromise your server for a malicious user to open another door. Even so, in today's modern Internet Web applications, it is a common requirement, because it helps to improve your business efficiency. On Facebook and...
Tinder Online Dating app vulnerability revealed Exact Location of Users
Using Popular Online Dating app - Tinder on iPhone?? Then you are at significant risk that exposed members' private information without their knowledge. Online Dating app Tinder, available for the iPhone from the app store, has become incredibly popular in the past few months. Tinder app allows y...
Crowd-Funding site Kickstarter Hacked! It's time to change your Password
If you have an account at the popular crowd funding site Kickstarter, it's time to change your account's password. Kickstarter's CEO Yancey Strickler says that the company has been hacked by an unknown hacker earlier this week. Kickstarter said in a blog post that no credit card information was...
Thieves Steal 800,000 Medical Records
UPDATE: A previous version of this story inaccurately stated that Horizon Blue Cross Blue Shield of New Jersey was not providing free credit monitoring to those affected by the breach. On November 4, someone broke into the offices of Horizon Blue Cross Blue Shield of New Jersey and stole two...
IT-Grundschutz, 13. EL
Zusammenfassung von Tests gemäß IT-Grundschutz in 13. Ergänzungslieferung. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94171 Diese Routinen prüfen sämtliche Maßnahm...
Threat Outbreak Alert: Fake American Express Activity Report Email Messages on September 3, 2013
Medium Alert ID: 30635 First Published: 2013 September 3 18:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an activity report from American Express for the recipient. The text in the email message attempts to convinc...
Qi Bo cms back-end database tool at the filter is not strictly the actuator can be written in a word-vulnerability and early warning-the black bar safety net
If your account password is leaked then you're in danger. in the background can directly get a webshell The background for the convenience of webmasters to have a database tool where the implementation Select '%execute request"value"%' into outfile 'F:/wwwroot/shiyanshi/cache/1.asp'; Just write t...
