CVE-2016-1113

Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate...

LocalTapiola: Possibly big authorization problem in Lähitapiola´s varainhoito

Issue The reporter found a design flaw in a feature where pdf-reports are generated. Pdf-reports were generated using 19-digit random names and the names as well as the reports were persistent and accessible by all authenticated users. Fix Guessing a random 19-digit name was found to be almost...

mbwin.net IFRAME Injection vulnerability

Vulnerable URL: http://www.mbwin.net/index.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 16489204 VIP website status:| No Check...

CVE-2016-1012

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1020,...

flash-plugin: multiple code execution issues fixed in APSB16-10

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1012,...

Fedora 22 : krb5-1.13.2-10.fc22 (2015-1b9c33d713)

krb5-1.13.2-13.fc23 - Patch CVE-2015-2698 krb5-1.12.2-19.fc21 - Patch CVE-2015-2698 krb5-1.13.2-10.fc22 - Patch CVE-2015-2698 ---- krb5-1.12.2-18.fc21 - Fix CVE-2015-2695, CVE-2015-2696, CVE-2015-2697 krb5-1.13.2-9.fc22 - Fix CVE-2015-2695, CVE-2015-2696, CVE-2015-2697 krb5-1.13.2-12.fc23 - Fix...

Fedora 21 : krb5-1.12.2-19.fc21 (2015-200d2dfd9f)

krb5-1.13.2-13.fc23 - Patch CVE-2015-2698 krb5-1.12.2-19.fc21 - Patch CVE-2015-2698 krb5-1.13.2-10.fc22 - Patch CVE-2015-2698 ---- krb5-1.12.2-18.fc21 - Fix CVE-2015-2695, CVE-2015-2696, CVE-2015-2697 krb5-1.13.2-9.fc22 - Fix CVE-2015-2695, CVE-2015-2696, CVE-2015-2697 krb5-1.13.2-12.fc23 - Fix...

Threat Outbreak Alert RuleID21143: Email Messages Distributing Malicious Software on February 19, 2016

Medium Alert ID: 43658 First Published: 2016 February 22 21:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21143 may contain the following files: Name |...

Threat Outbreak Alert RuleID21169: Email Messages Distributing Malicious Software on February 19, 2016

Medium Alert ID: 43643 First Published: 2016 February 19 17:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21169 may contain the following files: Name |...

Threat Outbreak Alert RuleID21168: Email Messages Distributing Malicious Software on February 19, 2016

Medium Alert ID: 43642 First Published: 2016 February 19 17:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21168 may contain the following files: Name |...

Linux x86/x86_64 Read etc/passwd Shellcode

Linux x86/x8664 Read etc/passwd Shellcode. Shellcode exploit for linux platform / + Author : B3mB4m Contact : [email protected] Project : https://github.com/b3mb4m/Shellsploit Greetz : Bomberman,T-Rex,KnocKout,ZoRLu If you want test it, you must compile it within x86 OS. Or basically you can...

ntp -- multiple vulnerabilities

Network Time Foundation reports: NTF's NTP Project has been notified of the following low- and medium-severity vulnerabilities that are fixed in ntp-4.2.8p6, released on Tuesday, 19 January 2016: Bug 2948 / CVE-2015-8158: Potential Infinite Loop in ntpq. Reported by Cisco ASIG. Bug 2945 /...

cars.com XSS vulnerability

Open Bug Bounty ID: OBB-126595 Description| Value ---|--- Affected Website:| cars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nmhsca.com Open Redirect vulnerability

Vulnerable URL: http://www.nmhsca.com/AdHandler.ashx?AdUrl=Adhandler.ashx?AdUrl=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 7461709 Google...

Threat Outbreak Alert RuleID20547: Email Messages Distributing Malicious Software on January 19, 2016

Medium Alert ID: 43084 First Published: 2016 January 19 18:54 GMT Last Updated: 2016 January 21 13:36 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20547...

Threat Outbreak Alert RuleID20539: Email Messages Distributing Malicious Software on January 19, 2016

Medium Alert ID: 43080 First Published: 2016 January 19 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20539 may contain the following files: Name |...

Threat Outbreak Alert RuleID20517: Email Messages Distributing Malicious Software on January 19, 2016

Medium Alert ID: 43065 First Published: 2016 January 19 14:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20517 may contain the following files: Name |...

care2.com XSS vulnerability

Vulnerable URL: http://www.care2.com/accounts/loginhelpnew.html?pg=http://www.care2.com/newsletters='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3969 Google Pagerank| 6 VIP...

ouh.fyns-amt.dk Open Redirect vulnerability

Vulnerable URL: http://ouh.fyns-amt.dk/externallink.asp?externallink=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 12.04.2016 Latest check for patch:| 12.04.2016 07:29 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...