tt-rss -- multiple vulnerabilities

tt-rss project reports: The cachedurl feature mishandles JavaScript inside an SVG document. imgproxy in plugins/afproxyhttp/init.php mishandles $REQUEST"url" in an error message. It does not validate all URLs before requesting them. Allows remote attackers to execute arbitrary PHP code via a...

tt-tengtai.com Cross Site Scripting vulnerability OBB-1298696

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

tt-form.de XSS vulnerability

Open Bug Bounty ID: OBB-716258 Description| Value ---|--- Affected Website:| tt-form.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

tt-guru.de XSS vulnerability

Open Bug Bounty ID: OBB-693266 Description| Value ---|--- Affected Website:| tt-guru.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-13410

CVE-2018-13410 affects Info-ZIP Zip 3.0; using -T and -TT can cause a denial of service via an off-by-one error (invalid free and crash) and possibly other impact. It is unclear if an untrusted party can realistically control -TT. Public advisories note vulnerable packages and patches (e.g., zip ...

tt-maximum.com XSS vulnerability

Open Bug Bounty ID: OBB-607710 Description| Value ---|--- Affected Website:| tt-maximum.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tt-shop-schuhmacher.de XSS vulnerability

Open Bug Bounty ID: OBB-603192 Description| Value ---|--- Affected Website:| tt-shop-schuhmacher.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tt-rheinberg.de XSS vulnerability

Open Bug Bounty ID: OBB-559175 Description| Value ---|--- Affected Website:| tt-rheinberg.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sixt.se XSS vulnerability

Vulnerable URL: https://www.sixt.se/gfx/leasing/firmenwagen/angebote/audi-tt.swf?motxt=Jetzt%2520informieren!=javascript:alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

sixt.pl XSS vulnerability

Vulnerable URL: https://www.sixt.pl/gfx/leasing/firmenwagen/angebote/audi-tt.swf?motxt=Jetzt%2520informieren!=javascript:alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Threat Outbreak Alert RuleID24969: Email Messages Distributing Malicious Software on September 11, 2016

Medium Alert ID: 48835 First Published: 2016 September 12 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24969 may contain the following files: Name ...

Threat Outbreak Alert RuleID22154: Email Messages Distributing Malicious Software on August 31, 2016

Medium Alert ID: 44562 First Published: 2016 April 8 18:54 GMT Last Updated: 2016 September 1 13:22 GMT Version: 23 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22154 a...

tt-rc.cn XSS vulnerability

Open Bug Bounty ID: OBB-128945 Description| Value ---|--- Affected Website:| tt-rc.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID18413: Email Messages Distributing Malicious Software on October 01, 2015

Medium Alert ID: 41324 First Published: 2015 October 1 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18413 may contain the following files: Name |...

Threat Outbreak Alert RuleID15770: Email Messages Distributing Malicious Software on June 7, 2015

Medium Alert ID: 39242 First Published: 2015 June 8 17:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15770 may contain the following files: Name | Size...

TT Guest Post Submit 1.0.0 - tt-guest-post-submit-submit.php rootpath Parameter Remote File Inclusion

The TT Guest Post Submit WordPress plugin was affected by a tt-guest-post-submit-submit.php rootpath Parameter Remote File Inclusion security vulnerability...

WordPress TT Guest Post Submit Plugin <= 1.0.0 - Remote File Inclusion

This plugin is prone to a tt-guest-post-submit-submit.php rootpath parameter remote file inclusion vulnerability. Solution Upgrade this plugin...

Threat Outbreak Alert: Fake TT Payment Copy Attachment Email Messages on January 17, 2014

Medium Alert ID: 32485 First Published: 2014 January 21 16:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain telegraphic transfer TT payment copy attachment confirmation for the recipient. The text in the email message...

[security bulletin] HPSBUX02556 SSRT100014 rev.1 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02288473 Version: 1 HPSBUX02556 SSRT100014 rev.1 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon ...

TT Web Site Manager 'tt_name' Remote SQL Injection Vulnerability

The host is running TT web site manager and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodttwmsqlinjvuln.nasl 7806 2017-11-17 09:22:46Z cfischer $ TT Web Site Manager 'ttname' Remote SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010...