CVE-2018-2791

creationtimestamp| type| source ---|---|--- 2018-05-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44752...

FiberHome User End Routers Bearing Access Authentication Bypass Vulnerability

FiberHome User End Routers Bearing AN1020-25 is a router from FiberHome, China. A security vulnerability exists in the FiberHome User End Routers Bearing AN1020-25, which is caused by a program that fails to properly perform authentication. An attacker could exploit the vulnerability to restore t...

BlueHat v18 Announced & Call for Papers Opens

We are back! Microsoft is excited to announce the next installment of the BlueHat Security Conference – BlueHat v18. We will be holding the event at Microsoft’s headquarter campus September 25-27, 2018. This year we are adding the option for workshops and networking on the first day prior to the...

BlueHat v18 Announced & Call for Papers Opens

We are back! Microsoft is excited to announce the next installment of the BlueHat Security Conference – BlueHat v18. We will be holding the event at Microsoft’s headquarter campus September 25-27, 2018. This year we are adding the option for workshops and networking on the first day prior to the...

A cryptocurrency platform exposed sensitive data of 25,000 users

By Waqas Bezop, a cryptocurrency startup exposed highly personal details of more This is a post from HackRead.com Read the original post: A cryptocurrency platform exposed sensitive data of 25,000 users...

akgunzuccaciye.com XSS vulnerability

Open Bug Bounty ID: OBB-608441 Description| Value ---|--- Affected Website:| akgunzuccaciye.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-10308

creationtimestamp| type| source ---|---|--- 2018-04-25 17:10:54+00:00| seen| Telegram/lmmZr6YlzTiBIMJEui8JfbMYWDijQYebl2SasFLljTT1LA...

dmweb.groupegoyette.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-608060 Description| Value ---|--- Affected Website:| dmweb.groupegoyette.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Exodus Wallet (ElectronJS Framework) - Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' class MetasploitModule 'Exodus Wallet ElectronJS Framework remote Code Execution', 'Description' = %q This module exploits a Remote...

bullzip.com XSS vulnerability

Open Bug Bounty ID: OBB-591979 Description| Value ---|--- Affected Website:| bullzip.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

freetrial.essentialskills.com XSS vulnerability

Open Bug Bounty ID: OBB-588343 Description| Value ---|--- Affected Website:| freetrial.essentialskills.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

homesteadhq.org XSS vulnerability

Open Bug Bounty ID: OBB-588639 Description| Value ---|--- Affected Website:| homesteadhq.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tudienats.com XSS vulnerability

Open Bug Bounty ID: OBB-590720 Description| Value ---|--- Affected Website:| tudienats.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tonetolabs.com XSS vulnerability

Open Bug Bounty ID: OBB-590636 Description| Value ---|--- Affected Website:| tonetolabs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kopyrightkorea.com XSS vulnerability

Open Bug Bounty ID: OBB-588956 Description| Value ---|--- Affected Website:| kopyrightkorea.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

weccom.com XSS vulnerability

Open Bug Bounty ID: OBB-590956 Description| Value ---|--- Affected Website:| weccom.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lighthousepodiumcondos.com XSS vulnerability

Open Bug Bounty ID: OBB-589057 Description| Value ---|--- Affected Website:| lighthousepodiumcondos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

startyourbank.com XSS vulnerability

Open Bug Bounty ID: OBB-590380 Description| Value ---|--- Affected Website:| startyourbank.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Solaris 10 (x86) : 126837-01

SunOS 5.10x86: rpcsecgss patch. Date this patch was last updated by Sun : Jun/25/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 120981-25

Sun Java System Web Proxy Server 4.0.17, Solaris SVR4 patch: Mai. Date this patch was last updated by Sun : Jul/01/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...