cr Android Securty Research: Crypto Local Storage Attack By packetstormsecurity.com Published On :: Thu, 28 Feb 2019 20:22:22 GMT Whitepaper called Android Security Research: Crypto Wallet Local Storage Attack. Full Article
cr Facebook Cracks Down On Deepfake Videos By packetstormsecurity.com Published On :: Tue, 07 Jan 2020 16:45:44 GMT Full Article headline fraud facebook
cr Facebook's Sir Nick Clegg Criticized Over WhatsApp Security By packetstormsecurity.com Published On :: Fri, 24 Jan 2020 16:52:25 GMT Full Article headline hacker privacy flaw facebook cryptography
cr Facebook Sues SDK Maker For Secretly Harvesting User Data By packetstormsecurity.com Published On :: Fri, 28 Feb 2020 07:05:36 GMT Full Article headline privacy data loss facebook
cr Coronavirus Conspiracies Go Viral On WhatsApp As Crisis Deepens By packetstormsecurity.com Published On :: Thu, 19 Mar 2020 15:12:47 GMT Full Article headline virus fraud facebook
cr Linux x86_x64 sys_creat("ajit", 0755) Shellcode By packetstormsecurity.com Published On :: Sun, 29 Dec 2019 10:11:11 GMT 53 bytes small Linux/x86_x64 sys_creat("ajit", 0755) shellcode. Full Article
cr Google Chrome 80 JSCreate Side-Effect Type Confusion By packetstormsecurity.com Published On :: Thu, 05 Mar 2020 14:45:47 GMT This Metasploit module exploits an issue in Google Chrome version 80.0.3987.87 (64 bit). The exploit corrupts the length of a float array (float_rel), which can then be used for out of bounds read and write on adjacent memory. The relative read and write is then used to modify a UInt64Array (uint64_aarw) which is used for read and writing from absolute memory. The exploit then uses WebAssembly in order to allocate a region of RWX memory, which is then replaced with the payload shellcode. The payload is executed within the sandboxed renderer process, so the browser must be run with the --no-sandbox option for the payload to work correctly. Full Article
cr CloudFlare Probes Mystery Interception Of Site Traffic Across India By packetstormsecurity.com Published On :: Thu, 14 Jul 2016 14:30:56 GMT Full Article headline privacy india
cr SuiteCRM 7.11.11 Broken Access Control / Local File Inclusion By packetstormsecurity.com Published On :: Thu, 13 Feb 2020 15:49:06 GMT SuiteCRM versions 7.11.11 and below suffer from an add_to_prospect_list broken access control that allows for local file inclusion attacks. Full Article
cr Little Town in Romania Is Cybercrime Central By packetstormsecurity.com Published On :: Tue, 15 Feb 2011 15:30:24 GMT Full Article headline cybercrime romania
cr Romanians Plead Guilty To Credit Card Hack On US Subway Shops By packetstormsecurity.com Published On :: Tue, 18 Sep 2012 15:02:35 GMT Full Article headline bank cybercrime fraud romania
cr Europol Smashes Romanian Credit Card Fraud Gang By packetstormsecurity.com Published On :: Fri, 29 Mar 2013 02:08:15 GMT Full Article headline cybercrime fraud romania
cr Celebrity Email Cracker Guccifer Gets Cuffed By packetstormsecurity.com Published On :: Thu, 23 Jan 2014 03:08:49 GMT Full Article headline hacker privacy email data loss romania
cr Ac4p.com Gallery 1.0 Cross Site Scripting / Shell Upload / Bypass / Disclosure By packetstormsecurity.com Published On :: Tue, 23 Feb 2010 07:00:24 GMT Ac4p.com Gallery version 1.0 suffers from cross site scripting, phpinfo disclosure, shell upload, and insecure cookie handling vulnerabilities. Full Article
cr Denapars Shop Script Bypass / Insecure Cookie / Shell Upload By packetstormsecurity.com Published On :: Wed, 31 Mar 2010 01:15:12 GMT Denapars Shop Script suffers from administrative bypass, shell upload, and insecure cookie handling vulnerabilities. Full Article
cr Memorial Web Site Script Password Reset / Insecure Cookie By packetstormsecurity.com Published On :: Sat, 24 Apr 2010 02:58:12 GMT Memorial Web Site Script suffers from password reset and insecure cookie handling vulnerabilities. Full Article
cr Paddelberg Topsite Script Insecure Cookie By packetstormsecurity.com Published On :: Mon, 09 Jan 2012 20:53:57 GMT Paddelberg Topsite Script version 1.2.3 suffers from an authentication bypass vulnerability due to insecure cookie handling. Full Article
cr Microsoft And Symantec Take Down Batimal Botnet By packetstormsecurity.com Published On :: Thu, 07 Feb 2013 15:06:13 GMT Full Article headline malware microsoft cybercrime botnet symantec
cr Symantec Warns On Credit Card Security Phishing Scam By packetstormsecurity.com Published On :: Wed, 17 Apr 2013 14:55:05 GMT Full Article headline bank cybercrime scam symantec phish
cr Symantec Creates Cloud To Battle Targeted Attacks By packetstormsecurity.com Published On :: Wed, 30 Oct 2013 15:12:32 GMT Full Article headline cybercrime fraud cyberwar symantec phish
cr Researchers Uncover Government Spy Tool Used To Hack Telecoms And Belgian Cryptographer By packetstormsecurity.com Published On :: Mon, 24 Nov 2014 15:02:14 GMT Full Article headline government privacy cyberwar spyware symantec cryptography
cr Cisco Patches Critical Vulnerabilities In Policy Suite By packetstormsecurity.com Published On :: Thu, 19 Jul 2018 14:27:38 GMT Full Article headline flaw patch cisco
cr Cisco Patches Router OS Against New Crypto Attack By packetstormsecurity.com Published On :: Wed, 15 Aug 2018 03:44:19 GMT Full Article headline flaw patch cisco cryptography
cr Cisco Warns Customers Of Critical Flaws, Including Struts By packetstormsecurity.com Published On :: Thu, 06 Sep 2018 13:13:53 GMT Full Article headline flaw patch cisco
cr Cisco Zero-Day Exploited In The Wild To Crash And Reload Devices By packetstormsecurity.com Published On :: Thu, 01 Nov 2018 14:06:26 GMT Full Article headline hacker denial of service flaw cisco
cr Cisco Fixes Critical Flaw In Wireless VPN, Firewall Routers By packetstormsecurity.com Published On :: Thu, 28 Feb 2019 15:35:39 GMT Full Article headline flaw patch cisco
cr Cisco Warns Of Critical Flaws In Data Center Network Manager By packetstormsecurity.com Published On :: Thu, 27 Jun 2019 14:09:21 GMT Full Article headline flaw cisco
cr New Year, New Critical Cisco Patches To Install By packetstormsecurity.com Published On :: Sat, 04 Jan 2020 16:06:28 GMT Full Article headline flaw patch cisco
cr Venmo Transaction Scraped In Privacy Warning To Consumers By packetstormsecurity.com Published On :: Tue, 18 Jun 2019 15:59:58 GMT Full Article headline privacy bank cybercrime data loss fraud flaw paypal
cr Microsoft Windows NtUserSetWindowFNID Win32k User Callback By packetstormsecurity.com Published On :: Tue, 16 Jul 2019 20:32:16 GMT An elevation of privilege vulnerability exists in Microsoft Windows when the Win32k component fails to properly handle objects in memory. This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This Metasploit module is tested against Windows 10 v1703 x86. Full Article
cr Microsoft Windows 7 Build 7601 (x86) Local Privilege Escalation By packetstormsecurity.com Published On :: Fri, 26 Jul 2019 03:22:22 GMT Microsoft Windows 7 Build 7601 (x86) local privilege escalation exploit. Full Article
cr Microsoft Windows Internet Settings Security Feature Bypass By packetstormsecurity.com Published On :: Tue, 17 Sep 2019 16:50:38 GMT Microsoft Windows suffers from an Internet Settings misconfiguration security feature bypass vulnerability. Versions affected include Windows 7 SP1, 8.0, 8.1 x86 and x64 with full patches up to July 2019. Full Article
cr Microsoft Windows 7 (x86) BlueKeep RDP Use-After-Free By packetstormsecurity.com Published On :: Tue, 19 Nov 2019 15:05:11 GMT Microsoft Windows 7 (x86) BlueKeep remote desktop protocol windows kernel use-after-free exploit. Full Article
cr Microsoft Teams Instant Messenger DLL Hijacking By packetstormsecurity.com Published On :: Mon, 16 Dec 2019 15:58:17 GMT Microsoft Teams Instant Messenger application on Windows 7 SP1 fully patched is vulnerable to remote DLL hijacking. Full Article
cr Microsoft Windows 7 Screen Lock Shellcode By packetstormsecurity.com Published On :: Wed, 22 Jan 2020 16:02:06 GMT 9 bytes small Microsoft Windows 7 screen locking shellcode. Full Article
cr Windscribe WindscribeService Named Pipe Privilege Escalation By packetstormsecurity.com Published On :: Wed, 05 Feb 2020 18:54:05 GMT The Windscribe VPN client application for Windows makes use of a Windows service WindscribeService.exe which exposes a named pipe \.pipeWindscribeService allowing execution of programs with elevated privileges. Windscribe versions prior to 1.82 do not validate user-supplied program names, allowing execution of arbitrary commands as SYSTEM. This Metasploit module has been tested successfully on Windscribe versions 1.80 and 1.81 on Windows 7 SP1 (x64). Full Article
cr Feds Once Again Demand Apple Unlock Encrypted iPhones By packetstormsecurity.com Published On :: Wed, 08 Jan 2020 16:25:50 GMT Full Article headline government privacy usa phone apple terror fbi cryptography
cr School ERP System 1.0 Cross Site Request Forgery By packetstormsecurity.com Published On :: Mon, 03 Feb 2020 16:16:46 GMT School ERP System version 1.0 suffers from a cross site request forgery vulnerability. Full Article
cr AVideo Platform 8.1 Cross Site Request Forgery By packetstormsecurity.com Published On :: Wed, 05 Feb 2020 18:33:56 GMT AVideo Platform version 8.1 suffers from a cross site request forgery vulnerability. Full Article
cr Online Job Portal 1.0 Cross Site Request Forgery By packetstormsecurity.com Published On :: Thu, 06 Feb 2020 17:43:41 GMT Online Job Portal version 1.0 suffers from a cross site request forgery vulnerability. Full Article
cr SOPlanning 1.45 Cross Site Request Forgery By packetstormsecurity.com Published On :: Sat, 15 Feb 2020 19:59:22 GMT SOPlanning version 1.45 suffers from a cross site request forgery vulnerability. Full Article
cr Ice HRM 26.2.0 Cross Site Request Forgery By packetstormsecurity.com Published On :: Sun, 16 Feb 2020 20:22:22 GMT Ice HRM version 26.2.0 suffers from a cross site request forgery vulnerability. Full Article
cr Easy2Pilot 7 Cross Site Request Forgery By packetstormsecurity.com Published On :: Thu, 20 Feb 2020 17:41:12 GMT Easy2Pilot version 7 suffers from a cross site request forgery vulnerability. Full Article
cr CandidATS 2.1.0 Cross Site Request Forgery By packetstormsecurity.com Published On :: Mon, 24 Feb 2020 09:24:01 GMT CandidATS version 2.1.0 suffers from a cross site request forgery vulnerability. Full Article
cr Easy2Pilot 8 SQL Injection / Cross Site Request Forgery By packetstormsecurity.com Published On :: Wed, 26 Feb 2020 04:44:44 GMT Easy2Pilot version 8 suffers from remote SQL injection, backdoor account, and cross site request forgery vulnerabilities. Full Article
cr Business Live Chat Software 1.0 Cross Site Request Forgery By packetstormsecurity.com Published On :: Wed, 26 Feb 2020 17:02:22 GMT Business Live Chat Software version 1.0 suffers from a cross site request forgery vulnerability. Full Article
cr WordPress Tutor LMS 1.5.3 Cross Site Request Forgery By packetstormsecurity.com Published On :: Mon, 02 Mar 2020 15:26:06 GMT WordPress Tutor LMS plugin version 1.5.3 suffers from a cross site request forgery vulnerability. Full Article
cr Wing FTP Server 6.2.3 Cross Site Request Forgery By packetstormsecurity.com Published On :: Wed, 11 Mar 2020 12:02:22 GMT Wing FTP Server version 2.3 suffers from a cross site request forgery vulnerability. Full Article
cr HRSALE 1.1.8 Cross Site Request Forgery By packetstormsecurity.com Published On :: Thu, 12 Mar 2020 19:47:06 GMT HRSALE version 1.1.8 suffers from a cross site request forgery vulnerability. Full Article
cr Enhanced Multimedia Router 3.0.4.27 Cross Site Request Forgery By packetstormsecurity.com Published On :: Mon, 16 Mar 2020 13:50:22 GMT Enhanced Multimedia Router version 3.0.4.27 suffers from a cross site request forgery vulnerability. Full Article
