thegradcafe.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1150857 Security Researcher ELProfesor Helped patch 2814 vulnerabilities Received 8 Coordinated Disclosure badges Received 107 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting thegradcafe.com websit...

Embracing Data Privacy Day

January 28 is Data Privacy Day, commemorating the Council of Europe Treaty known as Convention 108, the first legally binding international treaty on data protection signed on January 28, 1981. This "holiday" was originally celebrated in Europe where it is known as Data Protection day. But in 200...

Rockwell Automation Stratix Ethernet Switches < 15.3 IOS Improper Input Validation and Resource Management Errors (ICSA-18-107-04)

Binary data 720288.prm...

Rockwell Automation Stratix 8300 Ethernet Switches < 15.3 IOS Improper Input Validation and Resource Management Errors (ICSA-18-107-05)

Binary data 720287.prm...

Rockwell Automation Stratix 5900 Services Router < 15.7 Improper Input Validation and Resource Management (ICSA-18-107-03)

Binary data 720296.prm...

CVE-2016-10835

cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging SEC-107...

Authentication flaw

cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging SEC-107...

Linux/x86 - ASLR Disable Polymorphic Shellcode (107 bytes)

---------------------- DESCRIPTION ------------------------------------- ; Title: Linux x86 ASLR deactivation for Linux/x86 - Polymorphic ; Author: Daniel Ortiz ; Tested on: Linux 4.18.0-25-generic 26 Ubuntu ; Size: 107 bytes ; SLAE ID: PA-9844 ---------------------- ASM CODE...

Castlamp Zenbership Cross-Site Request Forgery Vulnerability

Castlamp Zenbership is an open source and free membership CRM software from Castlamp USA. The software is capable of providing a specialized customer relationship management system for membership sites. A cross-site request forgery vulnerability exists in Castlamp Zenbership version 107, which ca...

107.by XSS vulnerability

Open Bug Bounty ID: OBB-718913 Description| Value ---|--- Affected Website:| 107.by Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

107.by XSS vulnerability

Open Bug Bounty ID: OBB-657138 Description| Value ---|--- Affected Website:| 107.by Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Indusoft Web Studio - Directory Traversal Information Disclosure Exploit

Exploit for windows platform in category web applications require 'msf/core' class MetasploitModule 'Indusoft Web Studio Directory Traversal', 'Description' = %q This module exploits a flaw found in Indusoft Web Studio 'James Fitts' , 'License' = MSFLICENSE, 'Version' = '$Revision: $', 'Reference...

MS16-107: Security Update for Microsoft Office (3185852) (Mac OS X)

The version of Microsoft Office installed on the remote Mac OS X host is affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing a user to open a specially crafted...

MS16-107: Description of the security update for Office Web Apps Server 2013: September 13, 2016

None None...

MS16-107: Description of the security update for Office 2010: September 13, 2016

MS16-107: Description of the security update for Office 2010: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microso...

MS16-107: Description of the security update for Office 2016: September 13, 2016

None None...

Microsoft Office Memory Corruption (MS16-107: CVE-2016-3357)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsoft Office Memory Corruption (MS16-107: CVE-2016-3360)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsoft Office Memory Corruption (MS16-107: CVE-2016-3362)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsoft Office Memory Corruption (MS16-107: CVE-2016-3365)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...