CVE-2017-11121

creationtimestamp| type| source ---|---|--- 2018-02-12 08:43:55+00:00| seen| https://t.me/SecLabNews/1509 2018-02-13 13:20:43+00:00| seen| https://t.me/informationsecuritychannel/13126...

Solaris 10 (x86) : 149176-13 (deprecated)

SunOS 5.10x86: qlc patch. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 149176 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12. Deprecated and...

juif.org XSS vulnerability

Open Bug Bounty ID: OBB-519792 Description| Value ---|--- Affected Website:| juif.org Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...

Sql injection

xDashboard in OpenText Document Sciences xPression formerly EMC Document Sciences xPression v4.5SP1 Patch 13 has SQL Injection...

Asterisk DoS Vulnerability

Asterisk is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if...

EMC xPression 4.5SP1 Patch 13 SQL Injection Vulnerability

Exploit for multiple platform in category web applications Title: EMC xDashboard - SQL Injection Vulnerability Author: Pawel Gocyla Date: 02 January 2018 CVE: CVE-2017-14960 Affected Software: ================== EMC xPression v4.5SP1 Patch 13 Probably other versions are also vulnerable. SQL...

EMC xPression 4.5SP1 Patch 13 - 'model.jobHistoryId' SQL Injection

Title: EMC xDashboard - SQL Injection Vulnerability Author: Pawel Gocyla Date: 02 January 2018 CVE: CVE-2017-14960 Affected Software: ================== EMC xPression v4.5SP1 Patch 13 Probably other versions are also vulnerable. SQL Injection Vulnerability: ============================== This...

F5 Networks BIG-IP : Apache HTTPD vulnerability (K83043359)

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, modssl may dereference a NULL pointer when third-party modules call aphookprocessconnection during an HTTP request to an HTTPS port. CVE-2017-3169 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

WordPress Clean Up Optimizer 4.0.0 SQL Injection Vulnerability

WordPress Clean Up Optimizer plugin versions 4.0.0 and below suffer from a remote SQL injection vulnerability. Advisory Title: WordPress Clean Up Optimizer Plugin Security Vulnerability Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress Clean Up Optimizer plugin Language:...

Threat Outbreak Alert RuleID31594: Email Messages Distributing Malicious Software on December 13, 2017

Medium Alert ID: 56247 First Published: 2017 December 13 19:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31594 may contain the following files: Name |...

stuht.de XSS vulnerability

Vulnerable URL: https://www.stuht.de/index.php?Schneid-+%26+Windeisenhalter=products=1258=1=0=open&nodeId-1;=1002&parentProductGroupNo-1;=1258&level-1;=4&catId-1;===1%22%3E%3Csvg/onload=alert%27X-S-S%27%3E Details: Description| Value ---|--- Patched:| Yes, at 19.12.2017 Latest check for patch:|...

Threat Outbreak Alert RuleID31623: Email Messages Distributing Malicious Software on December 13, 2017

Medium Alert ID: 56252 First Published: 2017 December 13 18:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31623 may contain the following files: Name |...

uniecampus.it XSS vulnerability

Open Bug Bounty ID: OBB-452396 Description| Value ---|--- Affected Website:| uniecampus.it Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

casadelpuzzle.com XSS vulnerability

Open Bug Bounty ID: OBB-447930 Description| Value ---|--- Affected Website:| casadelpuzzle.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

ManageEngine Applications Manager < 13530 Multiple SQLi Vulnerabilities

ManageEngine Applications Manager is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Sql injection

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action...

Sql injection

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter...

kotabogor.go.id XSS vulnerability

Open Bug Bounty ID: OBB-417087 Description| Value ---|--- Affected Website:| kotabogor.go.id Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Threat Outbreak Alert RuleID31157: Email Messages Distributing Malicious Software on November 13, 2017

Medium Alert ID: 55885 First Published: 2017 November 13 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31157 may contain the following files: Name |...

velo.hu XSS vulnerability

Open Bug Bounty ID: OBB-411538 Description| Value ---|--- Affected Website:| velo.hu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...