11868 matches found
SQL Injection Vulnerability in Name Parameter of VoIP Operation Support System of Kunshi Network Technology Co.
The VoIP operation support system of Kunshi Network Technology Co., Ltd. is a support system for small and medium-sized VoIP operation business. A SQL injection vulnerability exists in the name parameter of the VoIP operation support system of Kunshi Network Technology Co. An attacker can exploit...
KV Site Admin CMS 3.0 SQL Injection
Exploit Title : KV Site Admin CMS 3.0 SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : e.World Technology Ltd. All rights reserved "Admin Area - Version 3.0" Version: 3.0 MyBlog: http://xbadgirl21.blogspot.com Tested on: BackBox skype:xbadgirl21 Video Proof :...
Keystroke Recognition Uses Wi-Fi Signals To Snoop
A group of academic researchers have figured out how to use off-the-shelf computer equipment and a standard Wi-Fi connection to sniff out keystrokes coming from someone typing on a keyboard nearby. The keystroke recognition technology, called WiKey, isn’t perfect, but is impressive with a reporte...
MIT Researchers Solve the Spectrum Crunch to make Wi-Fi 10 times Faster
While using your cell phone at a massive public event, like a concert, conference, or sporting event, you have probably experienced slow communication, poor performance or slow browsing speeds, as crowds arrive. That's because of ‘Spectrum Crunch’, which means, Interference of WiFi signals with...
Unsealing the Deal: Cyber Threats to Mergers and Acquisitions Persist in a Hot Market
Risks Posed by Sensitive Corporate Communications, Broadened Attack Surface In 2015, a record $5 trillion dollars was tied up in mergers and acquisitions M&A deals, according to JP Morgan. So far, mega deals in 2016 include Microsoft’s purchase of LinkedIn, Shire’s acquisition of Baxalta, and...
The micro-engine technology payment/wechat/nofity.php SQL injection vulnerability
No description provided by source...
Debian DSA-3649-1 : gnupg - security update
Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of GnuPG's random number generator. An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output. A first analysis on the impact of this bug...
The micro-engine technology-the QR code to delete the page platform/qr.ctrl.php Sql injection
No description provided by source...
Debian Security Advisory DSA 3650-1 (libgcrypt20 - security update)
Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of Libgcrypt OpenVAS Vulnerability Test $Id: deb3650.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3650-1 using nvtgen 1.0 Script version: 1.0 Autho...
WSO2 Carbon 4.4.5 - Denial of Service / Cross-Site Request Forgery
Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WSO2-CARBON-v4.4.5-CSRF-DOS.txt + ISR: ApparitionSec Vendor: ============ www.wso2.com Product: ================== Ws02Carbon v4.4.5 WSO2 Carbon is the core platform on which...
WSO2 Carbon 4.4.5 - Local File Inclusion
WSO2 Carbon 4.4.5 - Local File Inclusion + Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WSO2-CARBON-v4.4.5-LOCAL-FILE-INCLUSION.txt + ISR: ApparitionSec Vendor: =============== www.wso2.com Product: ====================...
WSO2 Carbon 4.4.5 - Persistent Cross-Site Scripting
Exploit for jsp platform in category web applications + Credits: John Page aka HYP3RLINX Vendor: ============= www.wso2.com Product: ================== Ws02Carbon v4.4.5 WSO2 Carbon is the core platform on which WSO2 middleware products are built. It is based on Java OSGi technology, which allows...
China Launches World's 1st 'Hack-Proof' Quantum Communication Satellite
China has taken one more step forward towards achieving success in Quantum communication technology. China has launched the world's first quantum communications satellite into orbit aboard a Long March-2D rocket earlier today in order to test the fundamental laws of quantum mechanics at space...
qooza.hk XSS vulnerability
Vulnerable URL: http://www.qooza.hk/article.php?cat=technology"=1524 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20649 VIP website status:| Yes Check qooza.hk SSL connection:|...
WSO2 Carbon 4.4.5 Cross Site Request Forgery / Denial Of Service
Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WSO2-CARBON-v4.4.5-CSRF-DOS.txt + ISR: ApparitionSec Vendor: ============ www.wso2.com Product: ================== Ws02Carbon v4.4.5 WSO2 Carbon is the core platform on which...
WSO2 Carbon 4.4.5 Cross Site Scripting
Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WSO2-CARBON-v4.4.5-PERSISTENT-XSS-COOKIE-THEFT.txt + ISR: ApparitionSec Vendor: ============= www.wso2.com Product: ================== Ws02Carbon v4.4.5 WSO2 Carbon is the...
2 Hackers Win Over 1 Million Air Miles each for Reporting Bugs in United Airlines
Two computer hackers have earned more than 1 Million frequent-flyer miles each from United Airlines for finding and reporting multiple security vulnerabilities in the Airline's website. Olivier Beg, a 19-year-old security researcher from the Netherlands, has earned 1 Million air miles from United...
Design Logic Vulnerabilities in Tianchu Information Technology Limited's Construction CMS System
Tianchu Information Technology Co., Ltd. is a technical company dedicated to website construction and operation, educational software development and e-commerce platform operation. A design logic vulnerability exists in Tianchu Information Technology Limited's construction CMS system, allowing...
Microsoft Internet Explorer CVE-2016-3290 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...