americatv.com.pe XSS vulnerability

Open Bug Bounty ID: OBB-73622 Description| Value ---|--- Affected Website:| americatv.com.pe Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2015-4759

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443,...

方维名品折扣系统越权清除用户收货地址 (Demo)

简要描述： RT 详细说明： demo地址：http://mp.fanwe.net 老规矩注册两账号 账号A收货地址 账号B 收货地址 点击账号B的提交，抓包修改地址id为账号A的地址id 查看账号A地址，发现被清除 漏洞证明： 如上...

Syria2u Arbahtube 1.0 Cross Site Request Forgery / Cross Site Scripting

| Title : Syria2u Arbahtube v1.0 Mullti Vulnerability | Author : indoushka | email : [email protected] | Dork : Copyright ©2014 script syria2u version1. All Rights Reserved. | Tested on: win8.1 Fr V.Pro 15:39 22/05/2015 | Bug : Mullti | Download : http://www.syria2u.com/...

Gaana.com Hacked, 10 Million Users' Details Exposed

Gaana.com -- One of India's most popular music streaming service with more than 10 Million registered users and 7.5 Million monthly visitors -- has reportedly been hacked, exposing the site’s user information database. A Pakistani hacker, who claimed responsibility for the hack, claims that...

St. Louis Federal Reserve Falls Victim to DNS Hijack

The St. Louis Federal Reserve Bank confirmed this week that it fell victim to a DNS hijack last month. The attack may have redirected users to bogus webpages and for a period of time exposed customers to phishing, malware and other attacks that potentially could have duped users into giving away...

SendGrid Email Delivery Service Hack

SendGrid, which sells a cloud-based email delivery service, has admitted that the extent of a hack disclosed three weeks ago was much more serious than originally reported. The company said an employee account was compromised and used to access other systems that contained customer and employee...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the openldap-servers-1.2.13 package for the Red Hat Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libqt3c102 package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-smp package of the SUSE Linux Enterprise operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

WordPress aeration stored XSS vulnerability, the impact of the 4. 2 and the following version-bug warning-the black bar safety net

The official WordPress in 4 on 2 1, released new version 4. 1. 2, wherein the mentioned fixes a serious memory typeXSSvulnerabilities. Soon someone shows vulnerability details. While the security research team Klikki Oy found in that new version XSSvulnerability a ThisXSSvulnerabilities appear in...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rsyslog5-gssapi-5.8.12 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libqt4-dbus package of the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

CVE-2015-2567

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Privileges...

4th Member of 'Xbox Underground' Group Pleads Guilty to $100 Million Theft

The Fourth and final member of an international hacking group called "Xbox Underground" XU has pled guilty to steal more than $100 Million in intellectual property and data from Microsoft, Epic Games, and Valve Corporation. In addition, the group also stole an Apache helicopter simulator develope...

Thousands of Hacked Uber Accounts Selling on Dark Web for $1

$US1 may be a very little amount, but it is enough to buy you a stolen Uber account and free car rides around the city. Two separate vendors on AlphaBay, a relatively new Dark Web marketplace launched in late 2014, are selling active Uber accounts with usernames and passwords for $1 each,...

Hacking Air-Gapped Computers Using Heat

An air-gapped computer system isolated from the Internet and other computers that are connected to external networks believes to be the most secure computers on the planet -- Yeah?? You need to think again before calling them 'safe'. A group of Israeli security researchers at the Cyber Security...

某政府系统#注入漏洞一枚

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下: /symItemManage/ItemForth.aspx?id=11 http://222.135.76.147:8200/symItemManage/ItemForth.aspx?id=11 http://222.135.127.190:7200/symItemManage/ItemForth.aspx?id=11 http://221.2.149.47:8200/symItemManage/ItemForth.aspx?id=11...

Fedora 20 : freexl-1.0.0i-1.fc20 (2015-3372)

Four potentially harmful bugs causing crashes and stack corruption were detected in FreeXL by American Fuzzy Lop and are solved in this release. Please note: such issues are never realistically expected to be encountered in real world XLS spreadsheets, anyway some purposely forged XLS document...

Fedora 21 : freexl-1.0.0i-1.fc21 (2015-3471)

Four potentially harmful bugs causing crashes and stack corruption were detected in FreeXL by American Fuzzy Lop and are solved in this release. Please note: such issues are never realistically expected to be encountered in real world XLS spreadsheets, anyway some purposely forged XLS document...