2162 matches found
flinx <= 1.3 (category.php id) Remote SQL Injection Vulnerability
No description provided by source. -------------------------------------------------------------- H-T Team HouSSaMix + ToXiC350 + RxH -------------------------------------------------------------- Author : Houssamix From H-T Team Script : flinx 1.3 & below Download :...
Joomla Component joomlaXplorer <= 1.6.2 - Remote Vulnerabilities
No description provided by source. ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix = Script : Joomla and Mambo Component joomlaxplorer = versi...
AT&T Suffers Data Breach, Customers' Personal Information Compromised
AT&T has confirmed a security data breach in which attackers have compromised the security of a number of its mobile customers and stolen personal information including Social Security numbers and call records. Back in April this year, AT&T suffered a data breach in which some of its customer...
SuSE 11.3 Security Update : openssl-certs (SAT Patch Number 9341)
openssl-certs has been updated to include four new and remove two certificates : - new: AtosTrustedRoot2011:2.8.92.51.203.98.44.95.179.50.crt - new: E-TugraCertificationAuthority:2.8.106.104.62.156.81.15 5.203.83.crt - new: TeliaSoneraRootCAv1:2.17.0.149.190.22.160.247.46.70.2...
Towelroot : One-Click Android Rooting Tool Released By Geohot
Waiting for the root access for your AT&T or Verizon Android phone? Then there is really a Great News for you! Geohot aka George Hotz - a famed cracker who was responsible for hacking the PlayStation 3 and subsequently being sued by Sony - has built and released a root tool called Towelroot on...
AT&T Warns Customers of Data Breach
AT&T has notified some of its mobile customers that employees of one of its contractors accessed some customer information, including birth dates and Social Security numbers, in an effort to generate codes that could be used to unlock devices. The company did not specify how many customers were...
[SECURITY] Fedora 20 Update: libtasn1-3.6-1.fc20
A library that provides Abstract Syntax Notation One ASN.1, as specified by the X.680 ITU-T recommendation parsing and structures management, and Distinguished Encoding Rules DER, as per X.690 encoding and decoding func tions...
Developers Raise Bounty of $17,600 for First to Root Samsung Galaxy S5
It has been months ago since the release of Samsung’s latest Smartphone, Galaxy S5 and we have seen a portion of International units receive root, but a couple of the carrier variants including the developer edition of Samsung Galaxy S5 for Verizon and At&T hasn’t been in the list, sadly. The...
[SECURITY] Fedora 19 Update: libinfinity-0.5.5-1.fc19
libinfinity is an implementation of the Infinote protocol written in GObjec t-based C...
JVN#55438786: Content Provider in CamiApp for Android fails to restrict access permissions
The Content Provider in CamiApp for Android provided by KOKUYO S&T Co.,Ltd. contains an issue where access permissions are not restricted. Impact If a user of the affected product uses another malicious Android application, information stored in the database may be obtained or altered. Solution...
ThinkSAAS最新版绕过过滤继续注入2处
简要描述： ThinkSAAS最新版绕过过滤继续注入2处 无视gpc，无需登录 详细说明： 之前这个漏洞有 ′ 雨。分析过： WooYun: Thinksaas某处绕过过滤的注射漏洞 现在官方有最新版，做了修改，加了过滤，但是过滤不严格，可以绕过继续注入。 第一处： 现在最新的代码/app/tag/action/addajax.php case "do": $objname = t$POST'objname'; $idname = tsFiltert$POST'idname'; $objid = t$POST'objid'; $tags = t$POST'tags';...
AT&T Cross Site Scripting
. / \ | |/ / / /\ | |\ \ / | \ |/ \ | // / / / Corporation 2014 c Published Report: 27/02/2014 Credits: Advanced Information Security Corporation, USA Severity: High/Critical OWASP TOP 10 Type: Web Application / Cross-Site Scripting . CVSS: 7.0 Author: Nicholas Lemonias. Information Security...
SA-CONTRIB-2014-009 - Tagadelic - Information Disclosure
This module provides an API and a few simple turnkey modules, which allows you to easily create tagclouds, weighted lists, search-clouds and such. The 6.x-1.x version does not account for node access modules, thus leading to information being disclosed. This vulnerability is mitigated by the fact...
T-Mobile HOME NET routers multiple security vulnerabilities
Privilege escalation, code execution, directory traversal CSRF...
SEC Consult SA-20140122-0 :: Critical vulnerabilities in T-Mobile HOME NET Router LTE (Huawei B593u-12)
SEC Consult Vulnerability Lab Security Advisory 20140122-0 ======================================================================= title: Multiple critical vulnerabilities product: T-Mobile HOME NET Router LTE / Huawei B593u-12 vulnerable version: V100R001C54SP063 T-Mobile Austria fixed version:...
Threat Outbreak Alert: Fake Picture Sharing Email Messages on January 30, 2014
Medium Alert ID: 32624 First Published: 2014 January 30 14:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that appear to contain a picture for the recipient. The text in the email message attempts to convince the recipient to open the...
AT&T Refuses to Issue Transparency Report, Cites Privacy
Telecommunications giant AT&T has come under fire from privacy advocates after it acknowledged that it will not publicly disclose any of its dealings with the National Security Agency. The company claimed that protecting customer privacy is at the crux of its decision not to share government...
CVE-2013-6029
Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrary code via a malformed .SVT file...
Stack overflow
Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrary code via a malformed .SVT file...
