[FD] Surveillance system used for censorship in Europe - Censorship attack combines packet injection and Heartbleed

2015-04-26 Thread Doug
>From >https://goodcrypto.com/news/2015/03/26/surveillance-system-used-for-censorship-in-europe/ Published here to resist censorship. Surveillance system used for censorship in Europe Censorship attack combines packet injection and Heartbleed We all know there is censorship online. It happen

[FD] WordPress 4.2 stored XSS

2015-04-26 Thread Jouko Pynnonen
*Overview* Current versions of WordPress are vulnerable to a stored XSS. An unauthenticated attacker can inject JavaScript in WordPress comments. The script is triggered when the comment is viewed. If triggered by a logged-in administrator, under default settings the attacker can leverage the vuln

[FD] XSS and CSRF vulnerabilities in ASUS RT-G32

2015-04-26 Thread MustLive
Hello list! There are Cross-Site Scripting and Cross-Site Request Forgery vulnerabilities in ASUS Wireless Router RT-G32. - Affected products: - Vulnerable is the next model: ASUS RT-G32 with different versions of firmware. I checked in ASUS RT-G3

Re: [FD] WordPress 4.2 stored XSS

2015-04-26 Thread Scott Arciszewski
Using MySQL column truncation to trick an XSS past their filter... clever. I never would have thought to do that. :) On Sun, Apr 26, 2015 at 4:13 PM, Jouko Pynnonen wrote: > *Overview* > Current versions of WordPress are vulnerable to a stored XSS. An > unauthenticated attacker can inject JavaSc