D-Link DIR-100 Brute Force / Cross Site Request Forgery

Hello list! There are Brute Force and Cross-Site Request Forgery vulnerabilities in D-Link DIR-100. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DIR-100, Firmware v1.01. All other versions also must be vulnerable. ---------- Details:...

Wallarm Finalist at 2017 Red Herring Top 100 North America

LOS ANGELES — 6.06.2017 — Wallarm has been selected as a finalist for Red Herring’s Top 100 North America award, one of the technology industry’s most prestigious prizes. Finalists for the awards are among the continent’s brightest and most innovative private ventures. Their place among North...

[SECURITY] Fedora 24 Update: kernel-4.10.17-100.fc24

The kernel meta package...

[SECURITY] Fedora 24 Update: kernel-4.9.13-100.fc24

The kernel meta package...

[SECURITY] Fedora 24 Update: kernel-4.9.12-100.fc24

The kernel meta package...

CentOS7 Kernel Denial Of Service

Exploit Title: CentOS7 Kernel Crashing by rsyslog daemon vulnerability | DOS on CentOS7 Exploit Author: Hosein Askari FarazPajohan Vendor HomePage: https://www.centos.org/ Version : 7 Tested on: Parrot OS Date: 12-2-2017 Category: Operating System Vulnerable Daemon: RSYSLOG Author Mail...

CVE-2016-8368: Improper Synchronization

An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. The affected Ethernet interface module is connected to a MELSEC-Q PLC, which may allow a remote attacker to conne...

CVE-2016-8370: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. Weakly encrypted passwords are transmitted to a MELSEC-Q PLC...

PT-2017-9644

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-B5, all versions Mitsubishi Electric Automation MELSEC-Q seri...

Dell SonicWALL TZ 100 < 5.9.1.0-22o DoS Vulnerability

Dell SonicWALL TZ 100 is prone to a denial of service DoS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

Dell SonicWALL SMA 100 Series 8.1 XSS / CSRF Vulnerability (ZSL-2016-5392)

Dell SonicWALL SMA 100 Series appliances are prone to a cross-site scripting XSS / cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MS11-100: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: December 29, 2011

MS11-100: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: December 29, 2011 INTRODUCTION Microsoft has released security bulletin MS11-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

MS11-100: Description of the security update for the .NET Framework 3.5.1 on Windows 7 SP1 and Windows Server 2008 R2 SP1: December 29, 2011

MS11-100: Description of the security update for the .NET Framework 3.5.1 on Windows 7 SP1 and Windows Server 2008 R2 SP1: December 29, 2011 INTRODUCTION Microsoft has released security bulletin MS11-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

fasttrack.co.uk XSS vulnerability

Vulnerable URL: http://www.fasttrack.co.uk/league-tables/sme-export-track-100/league-table/?leagueyear=2015'"--!confirmOPENBUGBOUNTY...

Denial of Service Vulnerability in Multiple Mitsubishi Electric MELSEC-Q Series Products

Mitsubishi Electric is a Japanese company. The affected products, QJ71E71-100, QJ71E71-B5 and QJ71E71-B2, are Ethernet interface modules used to connect MELSEC-Q series programmable controllers to host networks. A denial of service vulnerability exists in multiple Mitsubishi Electric MELSEC-Q...

Security Bypass Vulnerability in Multiple Mitsubishi Electric MELSEC-Q Series Products

Mitsubishi Electric is a Japanese company. The affected products, QJ71E71-100, QJ71E71-B5 and QJ71E71-B2, are Ethernet interface modules used to connect MELSEC-Q series programmable controllers to host networks. A security bypass vulnerability exists in multiple Mitsubishi Electric MELSEC-Q Serie...

Crestron AM-100 - Multiple Vulnerabilities

================================================================= Crestron AM-100 Multiple Vulnerabilities ================================================================= Date: 2016-08-01 Exploit Author: Zach Lanier Vendor Homepage: https://www.crestron.com/products/model/am-100 Version:...

WININET CHttpHeaderParser::ParseStatusLine Out-Of-Bounds Read

Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the eight entry in that series, although this particular vulnerability does not just affect web-browsers, but all applications that use WININET to make HTTP requests...

dance.nyc XSS vulnerability

Vulnerable URL: https://www.dance.nyc/search/?dir=%3C/script%3E%3Cscript%3Ealert'OPENBUGBOUNTY';%3C/script%3E%3Cscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 759468 VIP...

SSH Brute Force Logins With Default Credentials Reporting

It was possible to login into the remote SSH server using default credentials. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...