Sunell IPCAMERA IPR54/14AKDN(II)/13 Cross Site Scripting

COMPASS SECURITY ADVISORY https://www.compass-security.com/research/advisories/ Product: Sunell IPCAMERA IPR54/14AKDNII/13 1 Vendor: Shenzhen Sunell Technology Corporation CSNC ID: CSNC-2017-010 Subject: Reflected Cross-Site Scripting Risk: High Effect: Remotely exploitable Author: Stephan Sekula...

Update Rollup 13 for System Center 2012 R2 Data Protection Manager

Update Rollup 13 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Data Protection Manager. It also contains the installation instructions for this update. Note Existing Data...

samba security and bug fix update

4.4.4-13 - resolves: 1437816 - Fix krb5 memory cache in libads sasl code - resolves: 1437741 - Fix CVE-2016-2125, CVE-2016-2126 and CVE-2017-2619...

Apple Mac OS X Multiple Vulnerabilities - 01 - (HT207797)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

petersfieldherald.com XSS vulnerability

Vulnerable URL: http://www.petersfieldherald.com/search.cfm?sectionIs=search=LocalNews=2011="= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9133532 VIP website status:| No...

bengilmore.ca XSS vulnerability

Vulnerable URL: http://bengilmore.ca/index.php?action=searchresults"'--!=&price-min;=50000&price-max;=500000KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26176889 VIP websi...

International Components for Unicode (ICU) for C/C++ Buffer Overflow Vulnerability (CNVD-2017-05982)

International Components for Unicode ICU is the U.S. IBM and other companies to develop a C / C + + and Java programming languages provide a complete set of Unicode data manipulation function library, but also an open-source project to support the internationalization of software. A heap buffer...

CVE-2017-7868

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...

Threat Outbreak Alert RuleID28758: Email Messages Distributing Malicious Software on April 13, 2017

Medium Alert ID: 53445 First Published: 2017 April 13 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28758 may contain the following files: Name | Si...

CVE-2017-3006

creationtimestamp| type| source ---|---|--- 2017-04-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41878...

Asterisk 13.13 < 13.13-cert3 / 13.x < 13.14.1 / 14.x < 14.3.1 CDR user Field RCE (AST-2017-001)

According to its SIP banner, the version of Asterisk running on the remote host is 13.13 prior to 13.13-cert3, 13.x prior to 13.14.1, or 14.x prior to 14.3.1. Is it, therefore, affected by a buffer overflow condition due to a failure to check the size when setting the user field on a CDR. An...

vda.gtarcade.com XSS vulnerability

Vulnerable URL: http://vda.gtarcade.com/?q="'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

Threat Outbreak Alert RuleID28256: Email Messages Distributing Malicious Software on March 13, 2017

Medium Alert ID: 53005 First Published: 2017 March 13 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28256 may contain the following files: Name | Si...

atlantisbahamas.com XSS vulnerability

Vulnerable URL: http://www.atlantisbahamas.com/find?perpage=12= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 84628 VIP website status:| No Coordinated Disclosure Timeline:...

sucksex.com XSS vulnerability

Vulnerable URL: https://www.sucksex.com/?s=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%27OPENBUGBOUNTY%27%29%3B%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30951 VIP website...

eferding.at XSS vulnerability

Vulnerable URL: http://www.eferding.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8390205 VIP website status:| No Check...

Threat Outbreak Alert RuleID27753: Email Messages Distributing Malicious Software on February 13, 2017

Medium Alert ID: 52652 First Published: 2017 February 13 15:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27753 may contain the following files: Name |...

at.mcmworldwide.com XSS vulnerability

Vulnerable URL:...

eClinicalWorks Patient Portal SQL Injection Vulnerability (CNVD-2017-01321)

eClinicalWorks Patient Portal is a product for healthcare applications from eClinicalWorks, Inc. that provides patients with a secure means of communicating to view their Personal Health Record PHR, view lab results, and more. An SQL injection vulnerability exists in the template.jsp file in...

CVE-2016-1566

Cross-site scripting XSS vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enabled to a location shared by multiple users, allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename. NOTE: this vulnerability was fixed in...