UBUNTU-CVE-2015-3180

lib/navigationlib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to obtain sensitive course-structure information by leveraging access to a student account with a suspended enrolment...

UBUNTU-CVE-2015-3179

login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account...

CVE-2015-3180

lib/navigationlib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to obtain sensitive course-structure information by leveraging access to a student account with a suspended enrolment...

CVE-2015-3179

login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account...

CVE-2015-3180: Exposure of Sensitive Information to an Unauthorized Actor

lib/navigationlib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to obtain sensitive course-structure information by leveraging access to a student account with a suspended enrolment...

CVE-2015-3179: Undefined Security Weakness

login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account...

PT-2015-1578

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.5.10 Moodle versions 2.6.x through 2.6.10 Moodle versions 2.7.x through 2.7.7 Moodle versions 2.8.x through 2.8.5 Description The issue is related to insufficient access control in the login/confirm.php component of...

British Airways Suspends Accounts Following Apparent Breach

British Airways, one of the U.K’s biggest airlines, suspended users’ frequent flier accounts this weekend after an apparent breach recently hit the company. It’s unclear exactly how many fliers were implicated by what British Airways is calling “unauthorized activity” on its Executive Club...

Threat Outbreak Alert RuleID13595: Email Messages Distributing Malicious Software on February 17, 2015

Medium Alert ID: 37494 First Published: 2015 February 17 14:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13595 may contain the following files: Name |...

Bitstamp Bitcoin Exchange Hacked, $5 Million Stolen in Hack Attack

One of the biggest, reliable and most trusted Bitcoin exchange — Bitstamp — on Monday announced that it has been a target of a hacking attack, which lead to the theft of "less than 19,000 BTC" worth about $5 million in virtual currency; one BTC is about $270. Bitstamp issued a statement on its...

Android system is the presence of the cross-signed certificate vulnerability can lead to system crash-vulnerability warning-the black bar safety net

Overview Trend Micro found the Android system in the presence of a cross-signed certificate handling vulnerabilities. Currently the Android version still does not correctly handle these certificates. When two certificates with a loop certificate chain the certificate of A signature certificate...

Threat Outbreak Alert RuleID11665: Email Messages Distributing Malicious Software on September 23, 2014

Medium Alert ID: 35805 First Published: 2014 September 24 12:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11665 may contain the following files: Name ...

Bitcoin's Wallet Service Instawallet Hacked, suspended indefinitely

The digital currency Bitcoin has suffered yet another hack. Bitcoin wallet site Instawallet has been taken offline after a security compromise, has suspended its service indefinitely. Instawallet didn't say in a notice on its website how many bitcoins were stolen after hackers fraudulently access...

Phishers hijacking Facebook Pages using apps

Another phishing campaign come in action recently targeting Facebook accounts and company pages with millions of followers. Phishers continue to devise new fake apps for the purpose of harvesting confidential information. Not a new method, but very creative phishing example in Facebook hacking...

TinKode sentenced by a Romanian court and $120000 Fine

"Cernaianu Manole Razvan" akka TinKode, the Romanian behind attacks against NASA, Oracle, the Pentagon, and U.S. Army, was sentenced this week to a two-year suspended sentence, according to local media reports and was ordered to pay damages totalling more than US$120,000. He was arrested in Janua...

Stratfor hacked by Anonymous Hackers for #AntiSec

Stratfor hacked by Anonymous Hackers for AntiSec Stratfor who provides strategic intelligence on global business, economic, security and geopolitical affairs just now has been defaced by Anonymous Group of Hackers. Mirror of Hack is available here. Lulzsec Leader, SABU tweeted that "Over 90,000...

PayPal UK Twitter account hijacked by angry customer

PayPal UK Twitter account hijacked by angry customer Second high-profile hack of the week against Twitter accounts, Yesterday FOX News Twitter Account was Hacked by 5CR1PT K1DD3S & then sent false tweets saying that U.S. President Barack Obama had been shot dead. Today an angry customer of Paypal...

Microsoft Windows application policy bypass

It's possible to bypass application restriction policy by directly loading code into suspended process' memory via e.g. Microsoft Word macro...

Microsoft Windows application restriction policy bypass

Attribute VBName = "XRun" 'made by +ec 'Модуль способный заменять память только что созданого и не только 'процесса помеченного как SUSPENDED приостановленый. 'Ver 1.0 Option Explicit Const SIZEOF80387REGISTERS = 80 Const CREATESUSPENDED = 4 Const MEMCOMMIT As Long = &H1000& Const MEMRESERVE As...

Twitter Locks Out Wikileaks DDoS Group As Attacks Spread

Twitter has suspended the account used by Anonymous, an umbrella group of online hacker-activists that have claimed responsibility for denial of service DoS attacks on Visa, MasterCard, Paypal and a host of other public and private entities who have taken action against Wikileaks and its founder,...