cr Exagate Sysguard 6001 Cross Site Request Forgery By packetstormsecurity.com Published On :: Fri, 20 Mar 2020 14:45:22 GMT Exagate Sysguard 6001 suffers from a cross site request forgery vulnerability. Full Article
cr ECK Hotel 1.0 Cross Site Request Forgery By packetstormsecurity.com Published On :: Fri, 27 Mar 2020 13:11:49 GMT ECK Hotel version 1.0 suffers from a cross site request forgery vulnerability. Full Article
cr P5 FNIP-8x16A/FNIP-4xSH CSRF / Cross Site Scripting By packetstormsecurity.com Published On :: Tue, 21 Apr 2020 14:15:30 GMT P5 FNIP-8x16A / FNIP-4xSH versions 1.0.20 and 1.0.11 suffer from cross site request forgery and cross site scripting vulnerabilities. Full Article
cr Edimax EW-7438RPn Cross Site Request Forgery By packetstormsecurity.com Published On :: Wed, 22 Apr 2020 15:06:13 GMT Edimax EW-7438RPn suffers from a cross site request forgery vulnerability. Full Article
cr Complaint Management System 4.2 Cross Site Request Forgery By packetstormsecurity.com Published On :: Thu, 23 Apr 2020 19:31:05 GMT Complaint Management System version 4.2 suffers from a cross site request forgery vulnerability. Full Article
cr Maian Support Helpdesk 4.3 Cross Site Request Forgery By packetstormsecurity.com Published On :: Mon, 27 Apr 2020 15:15:48 GMT Maian Support Helpdesk version 4.3 suffers from a cross site request forgery vulnerability. Full Article
cr Apache OFBiz 17.12.03 Cross Site Request Forgery By packetstormsecurity.com Published On :: Fri, 01 May 2020 13:44:30 GMT Apache OFBiz version 17.12.03 suffers from a cross site request forgery vulnerability. Full Article
cr osTicket 1.12 File Upload Cross Site Scripting By packetstormsecurity.com Published On :: Sun, 11 Aug 2019 17:54:59 GMT An issue was discovered in osTicket versions before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was found that the file-upload functionality has fewer (or no) mitigations implemented for file content checks; also, the output is not handled properly, causing persistent XSS that leads to cookie stealing or malicious actions. Full Article
cr Playable 9.18 Script Insertion / Arbitrary File Upload By packetstormsecurity.com Published On :: Fri, 17 Apr 2020 15:28:08 GMT Playable version 9.18 for iOS suffers from script insertion and arbitrary file upload vulnerabilities. Full Article
cr Pwn2Own Crackers Defeat iOS and Samsung By packetstormsecurity.com Published On :: Thu, 14 Nov 2013 16:01:15 GMT Full Article headline hacker flaw apple conference samsung
cr Flaw In Samsung Pay Lets Hackers Wirelessly Skim Credit Cards By packetstormsecurity.com Published On :: Sat, 06 Aug 2016 18:03:29 GMT Full Article headline bank cybercrime fraud flaw samsung
cr Apple, Samsung, Microsoft React To Wikileaks' CIA Dump By packetstormsecurity.com Published On :: Wed, 08 Mar 2017 14:22:09 GMT Full Article headline government microsoft usa data loss flaw spyware apple cia samsung
cr Samsung Enters Crypto-Currency Chips Business By packetstormsecurity.com Published On :: Thu, 01 Feb 2018 01:07:30 GMT Full Article headline bank cryptography samsung
cr Without Encryption We Will Lose All Privacy. This Is Our New Battleground. By packetstormsecurity.com Published On :: Tue, 15 Oct 2019 13:49:15 GMT Full Article headline government privacy usa spyware nsa cryptography
cr Critical Windows Vuln Used To Rickroll The NSA And Github By packetstormsecurity.com Published On :: Thu, 16 Jan 2020 16:22:30 GMT Full Article headline privacy microsoft flaw nsa cryptography
cr Microsoft Windows NtUserMNDragOver Local Privilege Escalation By packetstormsecurity.com Published On :: Fri, 08 May 2020 20:05:13 GMT This Metasploit module exploits a NULL pointer dereference vulnerability in MNGetpItemFromIndex(), which is reachable via a NtUserMNDragOver() system call. The NULL pointer dereference occurs because the xxxMNFindWindowFromPoint() function does not effectively check the validity of the tagPOPUPMENU objects it processes before passing them on to MNGetpItemFromIndex(), where the NULL pointer dereference will occur. This module has been tested against Windows 7 x86 SP0 and SP1. Offsets within the solution may need to be adjusted to work with other versions of Windows, such as Windows Server 2008. Full Article
cr The Equifax Settlement Is A Cruel Joke By packetstormsecurity.com Published On :: Fri, 02 Aug 2019 17:00:27 GMT Full Article headline hacker government usa cybercrime data loss fraud identity theft
cr Kenya Passes Data Protection Law Crucial For Tech Investments By packetstormsecurity.com Published On :: Fri, 08 Nov 2019 15:17:13 GMT Full Article headline government data loss africa identity theft
cr Microsoft Discloses Security Breach Of Customer Support Database By packetstormsecurity.com Published On :: Wed, 22 Jan 2020 15:57:33 GMT Full Article headline hacker privacy microsoft data loss identity theft
cr Addressing Supply-Chain Risk Starts With People, Says Microsoft By packetstormsecurity.com Published On :: Sat, 10 Aug 2019 16:23:28 GMT Full Article headline microsoft conference
cr Crown Sterling Sues Black Hat Over Hecklers By packetstormsecurity.com Published On :: Mon, 26 Aug 2019 13:53:45 GMT Full Article headline fraud conference cryptography
cr The Doghouse: Crown Sterling By packetstormsecurity.com Published On :: Fri, 06 Sep 2019 15:32:44 GMT Full Article headline fraud conference cryptography
cr Kr00k Vulnerability Could Allow Crooks To Intercept WiFi Data Packets By packetstormsecurity.com Published On :: Thu, 05 Mar 2020 14:35:33 GMT Full Article headline wireless flaw conference rsa
cr PHP-Fusion CMS 9.03 Cross Site Scripting By packetstormsecurity.com Published On :: Wed, 26 Feb 2020 19:33:33 GMT PHP-Fusion CMS versions 9 through 9.03 suffer from multiple cross site scripting vulnerabilities. Full Article
cr Senate Cracks Down On Net Gambling By packetstormsecurity.com Published On :: Mon, 02 Oct 2006 09:13:16 GMT Full Article government gamble
cr Webscraping Allows Hackers To Hit Online Gambling Sites With Botnets By packetstormsecurity.com Published On :: Wed, 04 Feb 2009 18:46:16 GMT Full Article hacker botnet gamble
cr Microsoft VSCode Python Extension Code Execution By packetstormsecurity.com Published On :: Wed, 18 Mar 2020 15:12:49 GMT Proof of concept exploit for a Microsoft VSCode python extension code execution vulnerability. Full Article
cr Neowise CarbonFTP 1.4 Insecure Proprietary Password Encryption By packetstormsecurity.com Published On :: Tue, 21 Apr 2020 14:18:20 GMT Neowise CarbonFTP version 1.4 suffers from an insecure proprietary password encryption implementation. Second version of this exploit that is updated to work with Python 3. Full Article
cr Oracle Just Released A Whopping 334 Security Fixes In Critical Patch Update By packetstormsecurity.com Published On :: Thu, 16 Jan 2020 16:22:26 GMT Full Article headline database flaw patch oracle
cr CentOS-WebPanel.com Control Web Panel 0.9.8.846 Cross Site Scripting By packetstormsecurity.com Published On :: Mon, 05 Aug 2019 20:55:44 GMT CentOS-WebPanel.com Control Web Panel (CWP) version 0.9.8.846 suffers from a reflective cross site scripting vulnerability. Full Article
cr CentOS 7.6.1810 Control Web Panel 0.9.8.837 Cross Site Scripting By packetstormsecurity.com Published On :: Mon, 26 Aug 2019 15:59:03 GMT CentOS version 7.6.1810 with Control Web Panel version 0.9.8.837 suffers from a persistent cross site scripting vulnerability. Full Article
cr CentOS 7.6.1810 Control Web Panel 0.9.8.837 Cross Site Request Forgery By packetstormsecurity.com Published On :: Mon, 26 Aug 2019 16:01:11 GMT CentOS version 7.6.1810 with Control Web Panel version 0.9.8.837 suffers from a cross site request forgery vulnerability. Full Article
cr Microsoft Passport Cracked via Hotmail By packetstormsecurity.com Published On :: Mon, 05 Nov 2001 07:02:12 GMT Full Article microsoft email passport
cr Crypto Boffins Urge Belgium To Withdraw Early ePassports By packetstormsecurity.com Published On :: Sun, 10 Jun 2007 09:42:05 GMT Full Article flaw passport
cr Django 3.0 Cross Site Request Forgery By packetstormsecurity.com Published On :: Wed, 08 Apr 2020 16:43:36 GMT Django version 3.0 suffers from a cross site request forgery token bypass vulnerability. Full Article
cr Nissan Car Secretly Shares Driver Data With Websites By packetstormsecurity.com Published On :: Tue, 14 Jun 2011 00:52:18 GMT Full Article headline data loss car
cr Mandos Encrypted File System Unattended Reboot Utility 1.8.10 By packetstormsecurity.com Published On :: Mon, 23 Mar 2020 16:10:50 GMT The Mandos system allows computers to have encrypted root file systems and at the same time be capable of remote or unattended reboots. The computers run a small client program in the initial RAM disk environment which will communicate with a server over a network. All network communication is encrypted using TLS. The clients are identified by the server using an OpenPGP key that is unique to each client. The server sends the clients an encrypted password. The encrypted password is decrypted by the clients using the same OpenPGP key, and the password is then used to unlock the root file system. Full Article
cr TP-LINK Cloud Cameras NCXXX SetEncryptKey Command Injection By packetstormsecurity.com Published On :: Fri, 01 May 2020 23:55:55 GMT TP-LINK Cloud Cameras including products NC260 and NC450 suffer from a command injection vulnerability. The issue is located in the httpSetEncryptKeyRpm method (handler for /setEncryptKey.fcgi) of the ipcamera binary, where the user-controlled EncryptKey parameter is used directly as part of a command line to be executed as root without any input sanitization. Full Article
cr Crown Prince Of Saudi Arabia Accused Of Hacking Jeff Bezos' Phone By packetstormsecurity.com Published On :: Wed, 22 Jan 2020 15:57:44 GMT Full Article headline hacker government usa phone amazon flaw cyberwar facebook saudi arabia
cr Intel Chip Flaw - Math Unit May Spill Crypto Secrets To Apps By packetstormsecurity.com Published On :: Thu, 14 Jun 2018 01:21:32 GMT Full Article headline data loss flaw cryptography intel
cr New Spectre Attack Enables Secrets To Be Leaked Over A Network By packetstormsecurity.com Published On :: Fri, 27 Jul 2018 00:57:39 GMT Full Article headline hacker flaw intel
cr Weakness In Intel Chips Lets Researchers Steal Encrypted SSH Keystrokes By packetstormsecurity.com Published On :: Wed, 11 Sep 2019 13:56:24 GMT Full Article headline privacy flaw password cryptography intel
cr Intel's SGX Coughs Up Crypto Keys When Scientists Tweak CPU Voltage By packetstormsecurity.com Published On :: Wed, 11 Dec 2019 16:44:11 GMT Full Article headline flaw cryptography intel
cr Oculus Anti-Piracy Update Cracked In A Day By packetstormsecurity.com Published On :: Mon, 23 May 2016 15:42:10 GMT Full Article headline hacker flaw pirate facebook
cr User Management System 2.0 Cross Site Scripting By packetstormsecurity.com Published On :: Thu, 23 Apr 2020 19:19:35 GMT User Management System version 2.0 suffers from a persistent cross site scripting vulnerability. Full Article
cr Complaint Management System 4.2 Cross Site Scripting By packetstormsecurity.com Published On :: Thu, 23 Apr 2020 19:24:07 GMT Complaint Management System version 4.2 suffers from a persistent cross site scripting vulnerability. Full Article
cr jQuery html() Cross Site Scripting By packetstormsecurity.com Published On :: Sat, 25 Apr 2020 12:23:23 GMT jQuery versions prior to 3.5 suffer from an html() cross site scripting vulnerability. Full Article
cr Open-AudIT 3.3.0 Cross Site Scripting By packetstormsecurity.com Published On :: Sun, 26 Apr 2020 19:22:22 GMT Open-AudIT version 3.3.0 suffers from a cross site scripting vulnerability. Full Article
cr Geeklog 2.2.1 Cross Site Scripting By packetstormsecurity.com Published On :: Mon, 27 Apr 2020 14:55:02 GMT Geeklog version 2.2.1 suffers from a cross site scripting vulnerability. Full Article
cr POS PHP 17.5 Cross Site Scripting By packetstormsecurity.com Published On :: Tue, 28 Apr 2020 14:50:09 GMT POS PHP version 17.5 suffers from a persistent cross site scripting vulnerability. Full Article
