Encryption 101: ShiOne ransomware case study

In part one of this series, Encryption 101: a malware analyst's primer, we introduced some of the basic encryption concepts used in malware. If you haven't read it, we suggest going back for a review, as it's necessary in order to be able to fully follow part two, our case study. In this study, w...

Proclaim, 9.1.1, Arbitrary File Upload

Proclaim from Christian Web Ministries installs as combiblestudy, versions 9.1.1 and previous, arbitrary file upload, also backup file download resolution: update to 9.1.2 fixes both issues update notice: https://github.com/Joomla-Bible-Study/Joomla-Bible-Study/releases...

NAT with SD-WAN explained with Case study

Assistance required with NAT configuration...

study-work.de XSS vulnerability

Open Bug Bounty ID: OBB-553714 Description| Value ---|--- Affected Website:| study-work.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

curie.ornl.gov XSS vulnerability

Open Bug Bounty ID: OBB-487107 Description| Value ---|--- Affected Website:| curie.ornl.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

study-in.de XSS vulnerability

Vulnerable URL: https://www.study-in.de/de/kontakt/kontaktformular/ Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100915 VIP website status:| No...

eee.manchester.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-372754 Description| Value ---|--- Affected Website:| eee.manchester.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

study-in-spain.com XSS vulnerability

Open Bug Bounty ID: OBB-369698 Description| Value ---|--- Affected Website:| study-in-spain.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

Locky Gets Updated to ‘Ykcol’, Part of Rapid-Fire Spam Campaigns

Cybercriminals behind the Locky ransomware have revamped the malware’s code three times in 30-day period and blasted out massive spam campaigns. According to researchers at Trustwave, the latest variant of Locky ransomware is called Ykcol that’s Locky spelled backwards and was part of a Sept. 19...

Android Lockscreen Patterns Less Secure Than PINs

An academic study set out to prove whether it’s better to protect your Android phone with a PIN or a swipe pattern. The answer is PIN. At least when it comes to proximity attacks, namely someone lurking about trying to guess your PIN or unlock pattern. The study PDF, published Friday by researche...

study.vic.gov.au XSS vulnerability

Open Bug Bounty ID: OBB-311006 Description| Value ---|--- Affected Website:| study.vic.gov.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Stored cross-site scripting vulnerability in the study function on the YxtCMF CourseController.class.php page

YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. A stored cross-site scripting vulnerability exists in the study function on the YxtCMF CourseController.class.php page. An attacker can insert malicious js code into...

Document type vulnerabilities study-vulnerability warning-the black bar safety net

! ! For more details please click:download link password: dsbv...

Telegraph delivers better experience with Image Manager

The Telegraph Media Group TMG is a multi-media news publisher and its titles include The Daily Telegraph, The Sunday Telegraph and The Telegraph website. Today, its site serves more than 380 million pages to over 84 million unique visitors every month across the globe, featuring on average about...

Online pacemaker the presence of up to 8,000 application vulnerabilities-vulnerability warning-the black bar safety net

WhiteScope is an independent network of security services and training provider, they just released a study that shows from the four major manufacturers of pacemakers the presence of 8,000 application vulnerabilities, vulnerable to hacker attacks. WhiteScope for security reasons and not released...

studyinsweden.se XSS vulnerability

Vulnerable URL: https://studyinsweden.se/?s=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 75050 VIP website status:| No...

study-in.de XSS vulnerability

Vulnerable URL: https://www.study-in.de/en/plan-your-studies/find-programme-and-university/index.php?a=detail=w49140='"--!=56=56====name=1KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Study Abroad Education Website Script SQL Injection

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Study Abroad Educational Website Script Script Buy Now: http://www.popularclones.com/products/Study-Abroad-Educational-Website Author: Ihsan Sencan Author Web:...

Study Abroad Educational Website Script - SQL Injection

Study Abroad Educational Website Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Study Abroad Educational Website Script Script Buy Now:...

Study Abroad Educational Website Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Study Abroad Educational Website Script Script Buy Now:...