503 matches found
WebKit: UXSS via operationSpreadGeneric
Once a spread operation is optimized, the function |operationSpreadGeneric| will be called from then on. But operationSpreadGeneric's trying to get a JSGlobalObject from the argument of a spread operation. It seems that that optimization is not implemented to the release version of Safari yet...
Microsoft Windows JavaScript Spread Operator Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...
Python Steganography Tool: Stegosaurus
Python Steganography Tool A steganography tool for embedding payloads within Python bytecode. Stegosaurus is a steganography tool that allows embedding arbitrary payloads in Python bytecode pyc or pyo files. The embedding process does not alter the runtime behavior or file size of the carrier fil...
This Ransomware Unlocks Your Files For Free If You Infect Others
Is your PC infected with Ransomware? Either pay the ransom amount to the attacker or spread the infection further to get the decryption keys. Yes, this new technique has been employed by cyber criminals with the latest round of ransomware threat, dubbed Popcorn Time. Initially discovered by...
WhatsApp : XSS vulnerability can be misused for Spreading Malware
WhatsApp XSS vulnerability can be misused for Spreading Malware Little Insight: According to FACEBOOK,This XSS could take advantage of the known domain to make phishing attacks easier or can be misused for Spreading Malware Reward For Whatsapp XSS Vulnerability : 1000$ My Finding.... Domain:...
Microsoft Edge - Spread Operator Stack Overflow (MS16-119)
GetLength destArgs.Info.Count AssertMsgfalse, "The array length has changed since we allocated the destArgs buffer?"; Throw::FatalInternalError; for uint32 j = 0; j GetLength; j++ Var element; if !arr-DirectGetItemAtFullj, &element element = undefined; destArgs.ValuesargsIndex++ = element; When...
Windows Meterpreter Shell, Bind TCP Inline (x64)
Connect to victim and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 203846 include Msf::Payload::TransportConfig...
Microsoft Windows JavaScript Spread Operator Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...
MSRT July 2016 – Cerber ransomware
As part of our ongoing effort to provide better malware protection, the July 2016 release of the Microsoft Malicious Software Removal Tool MSRT includes detection for Win32/Cerber, a prevalent ransomware family. The inclusion in MSRT complements our Cerber-specific family detections in Windows...
Spread Signs - External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Spread Signs published at the 'play' market has multiple vulnerabilities...
Joomla then exposed to high-risk 0day vulnerability for remote command execution-vulnerability warning-the black bar safety net
Joomla security team emergency release of the 3. 4. 6 version fixes a high-risk 0day vulnerability. It is reported that the vulnerability from being found to the security patches released, it has been more than two days, at present also has been through other channels in the spread. You can...
Automattic: CSV Injection in polldaddy.com
Hello, We can inject commands in any fields of a member in an email group =210 for example, and when it's exported to CSV it will be evaluated to 20 in the corresponding cell, this enables an attacker to spread malware and execute system level commands on a victim's machine if the victim download...
Trello: CSV Injection
Hello, We can inject commands in the name field of a board =210 for example, and when it's exported to CSV it will be evaluated to 20 in the corresponding cell, this enables an attacker to spread malware and execute system level commands on a victim's machine if the victim downloaded the CSV file...
Koler Android Ransomware Learns to Spread via SMS
Users of Android operating system are warned of a new variant of Android malware Koler that spreads itself via text message and holds the victim’s infected mobile phone hostage until a ransom is paid. Researchers observed the Koler Android ransomware Trojan, at the very first time, in May when th...
Sofi WebGui <= 0.6.3 PRE (mod_dir) Remote File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl Sofi WebGui = 0.6.3 PRE Remote File Inclusion Vulnerability Script site:...
Spread The Word Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13737/info Spread The Word is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
Threat Outbreak Alert: Fake Product Purchase Order Email Messages on October 1, 2013
Medium Alert ID: 31068 First Published: 2013 October 1 14:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order for the recipient. The text in the email message attempts to convince the recipient to open the...
Android malware 'Priyanka' spreading rapidly through WhatsApp messenger
An Android malware is spreading around WhatsApp messenger called 'Priyanka'. It changes all your groups names to Priyanka, and may also change your contact names to Priyanka. Apparently, the malware doesn’t actually harm Android devices, but it is very annoying and it spreads manually, relying on...
Researchers Uncover PinkStats APT Toolkit
The arsenal of tools that attack groups use to do their business is seemingly endless, and many of them remain unknown for years before they’re discovered. Often, it’s not until a tool has been compromised or sold on the open market that researchers get a close look at it, but that’s been changin...
Shylock banking malware spreads via Skype
The banking Trojan known as Shylock has been updated with new functionality, including the ability to spread over Skype. The program was discovered in 2011 that steals online banking credentials and other financial information from infected computers. Shylock, named after a character from...