49 matches found
CVE-2021-38365
The connected documents identify CVE-2021-38365 as affecting ToneWinner (Winner) desktop speakers. The vulnerability allows a remote attacker to recover speech signals from the power-indicator LED using a telescope and an electro-optical sensor, a classically described Glowworm attack. The descri...
MISA expands portfolio and looks ahead during Microsoft Inspire
This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. Welcome to fiscal year 2022 FY22 and my first official blog as the MISA Lead. It’s been a whirlwind couple of months getting up to speed with all things MISA—closing out FY21...
and-the-winner-is.co.uk Cross Site Scripting vulnerability OBB-1371116
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Congratulations to our Query of the Month Winner for August 2019!
Our Query of The Month competition recognizes the top community-shared query that provides value to other Osquery users. To determine the query of the month, our team selects the customer query that has the most engagement or helps solve an important problem. The winner of the contest each month...
NSA Leaker 'Reality Winner' Gets More Than 5 Years in Prison
A former NSA contractor, who pleaded guilty to leaking a classified report on Russian hacking of the 2016 U.S. presidential election to an online news outlet last year, has been sentenced to five years and three months in prison. Reality Winner, a 26-year-old Georgia woman who held a top-secret...
winner-hosting.com XSS vulnerability
Open Bug Bounty ID: OBB-655117 Description| Value ---|--- Affected Website:| winner-hosting.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Reality Winner, N.S.A. Contractor, Sentenced to 5+ Years in Leak Case
A former NSA contractor, Reality L. Winner, has plead guilty on charges of leaking classified information, regarding a report on election meddling by Russian operatives in the 2016 U.S. elections. She was charged with espionage and was sentenced to more than five years in prison and three years o...
Profile of Reality Winner
New York Magazine published an excellent profile of the single-document leaker Reality Winner...
shop.bandinail.com XSS vulnerability
Open Bug Bounty ID: OBB-261288 Description| Value ---|--- Affected Website:| shop.bandinail.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
The grugq on Reality Winner, the Intercept, and OPSEC
Good commentary...
FBI Arrests NSA Contractor for Leaking Secrets – Here's How they Caught Her
The FBI arrested a 25-year-old NSA contractor on Saturday 3rd June for leaking classified information to an online news outlet which published its report yesterday 5th June — meaning the arrest was made two days before the actual disclosure went online. Reality Leigh Winner, who held a top-secret...
Winner Soccer Evolution - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Winner Soccer Evolution published at the 'play' market has multiple vulnerabilities...
Winner Betting Tips - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Winner Betting Tips published at the 'play' market has multiple vulnerabilities...
Winner Viewer - Kitchen in 3D - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Winner Viewer - Kitchen in 3D published at the 'play' market has multiple vulnerabilities...
Joomla JE Awd Song Component Persistent XSS Vulnerability
No description provided by source. Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/component/awdsong/ Google Dork: inurl:comawdsong Price:$37.00 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd...
Threat Outbreak Alert: Fake Prize Winner Announcement Email Messages on May 27, 2014
Medium Alert ID: 34364 First Published: 2014 May 27 19:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to Romanian-language spam email messages that claim to contain a prize for the recipient. The text in the email message attempts to convince the recipient to...
[SECURITY] Fedora 17 Update: kreversi-4.10.5-1.fc17
Kreversi is a simple one player strategy game played against the computer. The playing field is an 8 by 8 square board divided into 64 squares. The game pieces used are two sided stones, where each side has its own, distinctive color. If a piece is captured by an opposing player, that piece is...
[SECURITY] Fedora 18 Update: kreversi-4.10.5-1.fc18
Kreversi is a simple one player strategy game played against the computer. The playing field is an 8 by 8 square board divided into 64 squares. The game pieces used are two sided stones, where each side has its own, distinctive color. If a piece is captured by an opposing player, that piece is...
[SECURITY] Fedora 18 Update: kjumpingcube-4.10.5-1.fc18
KJumpingCube is a simple tactical game. You can play it against the computer or a friend. The playing area consists of squares containing points. When t he game starts each square has only one point, and no owner. Players move by clicking on either a vacant square or one of their own squares, thu...
Want to be the Part of History? Just be a part of E-HACK
E-HACK is an Information Security Workshop, organized by infySEC. The workshop aims at creating awareness about INFORMATION SECURITY by showing in what all ways information or data can be stolen. Meddle in cyber-warfare, battle with our machine master mind who will throw challenges on web...