Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote Report’ Reflected XSS
from Exploit-DB.com RSS Feed https://ift.tt/2KJTDC8
via IFTTT
Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote Report’ Reflected XSS
from Exploit-DB.com RSS Feed https://ift.tt/2KJTDC8
via IFTTT
SCO Openserver 5.0.7 – ‘outputform’ Command Injection
from Exploit-DB.com RSS Feed https://ift.tt/37CziHH
via IFTTT
SCO Openserver 5.0.7 – ‘section’ Reflected XSS
from Exploit-DB.com RSS Feed https://ift.tt/3mAyV4U
via IFTTT
Spiceworks 7.5 – HTTP Header Injection
from Exploit-DB.com RSS Feed https://ift.tt/3rgy8tm
via IFTTT
Academy-LMS 4.3 – Stored XSS
from Exploit-DB.com RSS Feed https://ift.tt/38giFRa
via IFTTT
Spotweb 1.4.9 – ‘search’ SQL Injection
from Exploit-DB.com RSS Feed https://ift.tt/3mB1LSz
via IFTTT
Queue Management System 4.0.0 – “Add User” Stored XSS
from Exploit-DB.com RSS Feed https://ift.tt/37zo2vR
via IFTTT
WordPress Plugin Contact Form 7 5.3.1 – Unrestricted File Upload
from Exploit-DB.com RSS Feed https://ift.tt/2LWytkL
via IFTTT
Analysis: NSO Group’s Pegasus spyware could allegedly track locations and access passwords
For almost a year, spyware sold by Israel’s NSO Group was allegedly armed with a computer security super-weapon: a zero-footprint, zero-click, zero-day exploit that used a vulnerability in iMessage to seize control of an iPhone at the push of a button.
That means it would have left no visible trace of being placed on target’s phones, could be installed by simply sending a message that the victim didn’t even need to click on, and worked even on phones that were running the then-latest version of iOS, the operating system for iPhones.
from Data and computer security | The Guardian https://ift.tt/34yI1ce
via IFTTT
Supply‑chain attack against a certification authority in Southeast Asia. Holiday online… Safely! Scammers targeting PayPal users. Week in security with Tony Anscombe
The post Week in security with Tony Anscombe appeared first on WeLiveSecurity
from WeLiveSecurity https://ift.tt/3rcIzOH
via IFTTT