Learning with Texts 1.6.2 - 'start' SQL Injection

Exploit Title: Learning with Texts 1.6.2 - 'start' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: http://lwt.sourceforge.net/ Software Link: https://sourceforge.net/projects/lwt/files/latest/download Version: 1.6.2 Category: Webapps Tested on:...

CVE-2018-5548

On BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for origuri parameter in an undisclosed /vdesk link of APM virtual server configured with an access profile, allowing a malicious user to build a redirect URI value using different blocks of cipher texts...

Fake Beto O'Rourke Texts Expose New Playground for Trolls

Someone hijacked a volunteer tool to make it look like Beto O'Rourke encouraged voter fraud—and that could just be the beginning...

Huawei Mate 9 Pro Cell Phone Short Message Module Denial of Service Vulnerability

The Huawei Mate 9 Pro is a smartphone product of the Chinese company Huawei Huawei. A denial of service vulnerability exists in the SMS module of the Huawei Mate 9 Pro. An unauthenticated attacker could set up a pseudo-base station and send certain malicious short messages to a cell phone that...

CVE-2017-14595

In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...

CVE-2017-14595

In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...

CVE-2017-14595

In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...

CVE-2017-14595: Undefined Security Weakness

In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...

[20170901] - Core - Information Disclosure

A logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state...

Huawei Mate 9 Push Module Privilege Vulnerability

Huawei Mate 9 is a smartphone from Chinese company Huawei.Push module is one of the message push modules. A privilege extraction vulnerability exists in the Push module in Huawei Mate 9 version MHA-AL00AC00B125. An attacker can exploit the vulnerability by tricking a user into saving a malicious...

Security Bypass Vulnerability in Multiple Samsung Phones

Samsung SM-G920F Galaxy S6 and others are smartphones released by the South Korean company Samsung Samsung. A security bypass vulnerability exists in several Samsung phones. An attacker can use the vulnerability to make a call, send a text message or issue a command...

Threat Outbreak Alert RuleID15448: Email Messages Distributing Malicious Software on August 31, 2016

Medium Alert ID: 46726 First Published: 2016 June 16 20:56 GMT Last Updated: 2016 September 1 13:08 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15448 a...

Font Studio- Photo Texts Image - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Font Studio- Photo Texts Image published at the 'play' market has multiple vulnerabilities...

TextMe Up Free Calling & Texts - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application TextMe Up Free Calling & Texts published at the 'play' market has multiple vulnerabilities...

postgresql: multiple issues

CVE-2015-3165 denial of service SSL clients disconnecting just before the authentication timeout expires can cause the server to crash via a double-free issue leading to denial of service. - CVE-2015-3166 information disclosure The replacement implementation of snprintf failed to check for errors...

[SECURITY] Fedora 22 Update: dokuwiki-0-0.24.20140929c.fc22

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at crea ting documentation of any kind. It has a simple but powerful syntax which makes sure the datafiles remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

[SECURITY] Fedora 21 Update: dokuwiki-0-0.24.20140929c.fc21

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at crea ting documentation of any kind. It has a simple but powerful syntax which makes sure the datafiles remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...

Ultra-secure Blackphone Vulnerability lets Hackers Decrypt Texts

The makers of ultra secure BlackPhone titled by Silent Circle as, "world’s first Smartphone which places privacy and control directly in the hands of its users," have recently fixed a critical vulnerability in the instant messaging application that allows hackers to run malicious code on the...

Vishing Attacks Targeting Dozens of Banks, Users' Card Data

A recent VoIP-based phishing campaign has been netting the payment card information of up to 250 Americans per day. Voice over IP phishing, or vishing, is a form of phishing that relies on users getting tricked into giving up their payment card information after receiving phone or SMS messages –...

[SECURITY] Fedora 17 Update: dokuwiki-0-0.14.20121013.fc17

DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at crea ting documentation of any kind. It has a simple but powerful syntax which makes sure the datafiles remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no...