156 matches found
Opponents Vow to Continue the Fight after Trump Reauthorizes Domestic Spying Law
A controversial U.S. legal framework concerning domestic surveillance is poised to live on for another six years, but opponents say they plan to continue the fight. In a widely expected move, President Donald Trump signed the bill one day after the Senate approved it in a 65-34 vote. At issue is...
CVE-2015-6839
The parse function in MSA vot.Ar 3.1 does not check whether a candidate receives more than one vote, which allows physically proximate attackers to cast multiple votes for a candidate via a crafted RFID ballot tag...
Design/Logic Flaw
The parse function in MSA vot.Ar 3.1 does not check whether a candidate receives more than one vote, which allows physically proximate attackers to cast multiple votes for a candidate via a crafted RFID ballot tag...
CVE-2015-6839
The CVE-2015-6839 entry concerns MSA vot.Ar 3.1, where the parse function fails to prevent a candidate from receiving multiple votes. The underlying issue is a vulnerability in the parsing logic that allows an RFID ballot tag crafted by an attacker in close physical proximity to cause multiple vo...
CVE-2015-6839
The parse function in MSA vot.Ar 3.1 does not check whether a candidate receives more than one vote, which allows physically proximate attackers to cast multiple votes for a candidate via a crafted RFID ballot tag...
CVE-2016-10503
IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of votes in the meeting. IBM X-Force ID: 113803...
Design/Logic Flaw
IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of votes in the meeting. IBM X-Force ID: 113803...
Legal Robot: Improper validation of parameters while creating issues
Heya LegalRobot Team, There is some Improper Access Control on the /Issues/insert endpoint, which leads to three notable vulnerabilities. ----- The first allows attackers to create public issues without undergoing review by setting state: "Open" and public: true. A sample request is given below:...
Urban Dictionary: Race Condition in Definition Votes
There exists a race condition vulnerability in definition votes, allowing any user to artificially manipulate the number of up/down votes for a definition by making asynchronous requests to vote. A malicious user can use this method to reach any number of up or down votes for a definition. See th...
Nasdaq to Use Bitcoin-style Blockchain to Record Shareholder Votes
The Nasdaq stock exchange and the Republic of Estonia have announced the use of Blockchain-based technology to allow shareholders of companies to e-vote in shareholder meetings even when they're abroad, according to Nasdaq's press release. Global stock market giant is developing an electronic...
Joomla com_foobla_suggestions (idea_id) 1.5.11 - SQL Injection Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------- joomla component comfooblasuggestions ideaid SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author :...
Joomla <= 1.0.10 - (poll component) Arbitrary Add Votes Exploit
No description provided by source. ?php Joomla poll component add unlimited votes Computer Security Researchers Institute works regardless of php.ini settings by trueend5 http://www.KAPDA.ir errorreporting0; inisetmaxexecutiontime,0; inisetdefaultsockettimeout, 2; obimplicitflush 1; echo...
CVE-2013-5640
Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the 1 answerid or 2 questionid parameter to polls/vote.php, 3 storyid parameter to comments/add.php or 4 comments/edit.php, or 5 threadid parameter to posts/add.php. NOTE: this issue...
A voting system bug, cause you can brush votes brush downloads-vulnerability warning-the black bar safety net
This article does not for a particular activity or site, the ASP voting system relates to many website activities. Its core code is the same, just styled somewhat questioningly. Don't want everyone to bulk engage in Station, but occasionally hit peripheral participation activities can use this BU...
Albania Hackers won Voting Poll : Who are the best Hackers ?
Albania Hackers won Voting Poll : Who are the best Hackers ? Hello Friends, We are Happy to inform you guys that, after Open Voting of 30 days on question "Who are the Best Hacker ?" , Finally "Albania Hackers" won by 246 Votes . Total No. of Votes : 694 Thankyou For Visiting "The Hacker News" Cr...
Max Anket v1.0 - Multiple Remote Vulnerabilities
Exploit for php platform in category web applications ================================================ Max Anket v1.0 - Multiple Remote Vulnerabilities ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...
Authentication flaw
AJ Square Free Polling Script AJPoll Database version allows remote attackers to bypass authentication and reset poll votes via a direct request to admin/resetvote.php...
CVE-2008-7045
AJ Square Free Polling Script (AJPoll) Database version is affected by CVE-2008-7045, which allows remote attackers to bypass authentication and reset poll votes by issuing a direct request to admin/resetvote.php. This is the concrete vulnerability described in the CVE entry; no remediation or af...
CVE-2009-1036
The linked records indicate a CSRF vulnerability in the Drupal Plus 1 module, versions before 6.x-2.6. The root cause is not described beyond CSRF allowing remote attackers to cast votes for content via unspecified URI aspects. Affected product: Plus 1 module for Drupal (pre-6.x-2.6). There is no...