Facebook Software Bug Made Some Private Posts Public: 14 Million Affected

A Facebook software bug in May switched the “suggested audience” for posts to “public” for 14 millions of users. The glitch meant Facebook users who though they were sharing content with just friends or small groups actually made their posts available to the general public. The incident is the...

santa-catarina-flats.empreendimentos.com.pt XSS vulnerability

Open Bug Bounty ID: OBB-629181 Description| Value ---|--- Affected Website:| santa-catarina-flats.empreendimentos.com.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

Mozilla Firefox Security Advisories (MFSA2018-14, MFSA2018-14) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

mairie-cormeray.fr XSS vulnerability

Open Bug Bounty ID: OBB-621537 Description| Value ---|--- Affected Website:| mairie-cormeray.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

VMware Workstation 14.x < 14.1.2 Multiple DoS (VMSA-2018-0013)

The version of VMware Workstation installed on the remote Windows host is 14.x prior to 14.1.2. It is, therefore, missing a security update that fixes multiple RPC related flaws that allow denial of service attacks. C Tenable Network Security, Inc. include"compat.inc"; if description...

Null pointer dereference

VMware Workstation 14.x before 14.1.2 and Fusion 10.x before 10.1.2 contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine...

CVE-2018-6963

CVE-2018-6963 affects VMware Workstation 14.x (pre-14.1.2) and VMware Fusion 10.x (pre-10.1.2). The root cause is a NULL pointer dereference in the RPC handler, enabling a local attacker with limited guest privileges to cause a denial of service on the guest OS. Connected advisories corroborate m...

Threat Outbreak Alert RuleID32751: Email Messages Distributing Malicious Software on May 14, 2018

Medium Alert ID: 57895 First Published: 2018 May 15 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32751 may contain the following files: Name | Size...

mastermindscorp.com XSS vulnerability

Open Bug Bounty ID: OBB-606574 Description| Value ---|--- Affected Website:| mastermindscorp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-10283

CVE-2018-10283 affects CliqueMania loja virtual version 14. It is a SQL Injection flaw reachable via the patch/remote.php id parameter in a recomendar action. Multiple sources describe that a remote attacker can exploit the vulnerability to execute SQL commands using the id parameter. The provide...

MS11-049: Description of the security update for Visual Studio 2008 SP1: June 14, 2011

MS11-049: Description of the security update for Visual Studio 2008 SP1: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-049. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

thesettlersonline.com XSS vulnerability

Open Bug Bounty ID: OBB-602129 Description| Value ---|--- Affected Website:| thesettlersonline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mkemee.com XSS vulnerability

Open Bug Bounty ID: OBB-601900 Description| Value ---|--- Affected Website:| mkemee.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tsr-gaash.co.il XSS vulnerability

Open Bug Bounty ID: OBB-601858 Description| Value ---|--- Affected Website:| tsr-gaash.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ecomm.mistraldata.com XSS vulnerability

Open Bug Bounty ID: OBB-601623 Description| Value ---|--- Affected Website:| ecomm.mistraldata.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Adobe ColdFusion Multiple Vulnerabilities (APSB18-14)

Adobe ColdFusion is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:coldfusion";...

Adobe ColdFusion 11.x < 11u14 / 2016.x < 2016u6 Multiple Vulnerabilities (APSB18-14)

The version of Adobe ColdFusion running on the remote Windows host is 11.x prior to update 14 or 2016.x prior to update 6. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109017; scriptversion"1.9";...

Instacart: CSRF Trial 14 days express subscription

Description ======== When a new user has been registered, Instacart pops up a message offering the user for a limited time 14 days express trial, in which the user may decide to skip and subscribe later on decision. The research has found that the express trial subscription endpoint does not...

123test.com XSS vulnerability

Open Bug Bounty ID: OBB-580179 Description| Value ---|--- Affected Website:| 123test.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wcsmith.com XSS vulnerability

Open Bug Bounty ID: OBB-580154 Description| Value ---|--- Affected Website:| wcsmith.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...