gastrohep.net Open Redirect vulnerability

Vulnerable URL: http://www.gastrohep.net/adverts/redirect.asp?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

rustorg.net Open Redirect vulnerability

Vulnerable URL: http://rustorg.net/Redirect.aspx?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 3405415 VIP website status:| No Check...

jom.pe.kr XSS vulnerability

Vulnerable URL: http://jom.pe.kr/?vid=blog=textyle=dispTextyletarget=titlecontentkeyword=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...

socialll.net Open Redirect vulnerability

Vulnerable URL: http://socialll.net/redirect?ref=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 88884 VIP website status:| No Check...

FreeBSD-SA-16:30.portsnap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:30.portsnap Security Advisory The FreeBSD Project Topic: Multiple portsnap vulnerabilities Category: core Module: portsnap Announced: 2016-10-10 Affects: All...

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

Threat Outbreak Alert RuleID25013: Email Messages Distributing Malicious Software on September 16, 2016

Medium Alert ID: 48926 First Published: 2016 September 16 14:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25013 may contain the following files: Name ...

Threat Outbreak Alert RuleID24947: Email Messages Distributing Malicious Software on September 16, 2016

Medium Alert ID: 48931 First Published: 2016 September 16 14:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24947 may contain the following files: Name ...

Threat Outbreak Alert RuleID25039: Email Messages Distributing Malicious Software on September 16, 2016

Medium Alert ID: 48935 First Published: 2016 September 16 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25039 may contain the following files: Name ...

Threat Outbreak Alert RuleID25060: Email Messages Distributing Malicious Software on September 16, 2016

Medium Alert ID: 48934 First Published: 2016 September 16 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25060 may contain the following files: Name ...

moodle -- multiple vulnerabilities

Marina Glancy reports: MSA-16-0022: Web service tokens should be invalidated when the user password is changed or forced to be changed...

Threat Outbreak Alert RuleID24902: Email Messages Distributing Malicious Software on September 8, 2016

Medium Alert ID: 48818 First Published: 2016 September 8 20:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24902 may contain the following files: Name |...

FBI Arrests Two Hackers Who Hacked US Spy Chief, FBI and CIA Director

US authorities have arrested two North Carolina men on charges that they were part of the notorious hacking group "Crackas With Attitude." Crackas with Attitude is the group of hackers who allegedly was behind a series of audacious and embarrassing hacks that targeted personal email accounts of...

Mozilla Thunderbird Security Advisories - 1 - (MFSA2016-16, MFSA2016-38) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

chandris-hellas.eu XSS vulnerability

Vulnerable URL: http://www.chandris-hellas.eu/pub/JobOffer.asp?lang=en" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Linux/x86 - zsh TCP Bind Shell Port 9090 (96 bytes)

/ ; ; Linux x86 ; Author: thryb ; Date: 13-07-16 ; Purpose: Bind /bin/zsh to TCP port 9090 ; Size: 96 bytes ; ID: SLAE-770 ; Git: https://www.github.com/thryb/SLAE-770 ; global start section .text start: xor eax, eax ; cleaning registers for sanity xor ebx, ebx xor edx, edx xor edi, edi ; 1 -...

FreeBSD : moodle -- multiple vulnerabilities (3ddcb42b-5b78-11e6-b334-002590263bf5)

Marina Glancy reports : - MSA-16-0019: Glossary search displays entries without checking user permissions to view them - MSA-16-0020: Text injection in email headers - MSA-16-0021: Unenrolled user still receives event monitor notifications even though they can no longer access course %NASLMINLEVE...

Samsung Security Manager 1.4 ActiveMQ Broker Service PUT Method Remote Code Execution

This is an exploit against Samsung Security Manager that bypasses the patch in ZDI-15-156 & ZDI-16-481 by exploiting the vulnerability against the client-side. This exploit has been tested successfully using IE, FireFox and Chrome by abusing a GET request XSS to bypass CORS and reach the vulnerab...