intend.ro XSS vulnerability

Open Bug Bounty ID: OBB-424081 Description| Value ---|--- Affected Website:| intend.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

accounts.digikala.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-424064 Description| Value ---|--- Affected Website:| accounts.digikala.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

kbsa.org.uk Open Redirect vulnerability

On the 19.11.2017 security researcher reported a Open Redirect vulnerability affecting the kbsa.org.uk website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 19 November...

stonehavensouthchurch.org.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-423425 Description| Value ---|--- Affected Website:| stonehavensouthchurch.org.uk Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat...

Implementing the CIS 20 Critical Security Controls: Slash Risk of Cyber Attacks by 85%

If a CISO needed to cut cyber attack risk by 85%, how would this security chief go about accomplishing that? Would the CISO even know where to begin? It’s safe to say that such a mandate would be considered daunting, and maybe even overwhelming. CISOs are scrambling to protect IT infrastructures...

D-Link DGS-1500 Ax RCE Vulnerability

D-Link DGS-1500 Ax devices before 2.51B021 are vulnerable to remote code execution RCE. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

cars.com XSS vulnerability

Open Bug Bounty ID: OBB-376943 Description| Value ---|--- Affected Website:| cars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Malvertising Campaign Redirects Browsers To Terror Exploit Kit

Security experts are warning some “Quit Smoking” and “20 Minute Fat Loss” ads online are delivering more than sales pitches. According to researchers at Zscaler, ads are redirecting browsers to malicious landing pages hosting the Terror exploit kit. The campaigns have been sustained, with the...

#CbChats: 3 Questions with Carbon Black’s Chief People Officer Amy Robinson

Amy Robinson is Carbon Black's Chief People Officer. She is also taking over Boston tech, according to Rev3, a list comprising the top 20 female tech executives in Boston. Amy is the third Carbon Black honoree on the Rev Boston list. Both Di Hall and Sandra O' Sullivan were named to the list in...

oar.kashmiruniversity.ac.in XSS vulnerability

Vulnerable URL:...

Threat Outbreak Alert RuleID31050: Email Messages Distributing Malicious Software on October 20, 2017

Medium Alert ID: 55655 First Published: 2017 October 20 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31050 may contain the following files: Name |...

adare.ireland.hostelhotel.cn XSS vulnerability

Vulnerable URL: http://adare.ireland.hostelhotel.cn/?page=%22%3E%3CScRipT%3Ealert%28666%29%3C%2FScrIpT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

e-hometutors.com XSS vulnerability

Open Bug Bounty ID: OBB-354817 Description| Value ---|--- Affected Website:| e-hometutors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pixelmonmod.com XSS vulnerability

Open Bug Bounty ID: OBB-353510 Description| Value ---|--- Affected Website:| pixelmonmod.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-7783

creationtimestamp| type| source ---|---|--- 2017-10-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43020...

fun.alu-concept.de Open Redirect vulnerability

Vulnerable URL: http://www.fun.alu-concept.de/norge/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

luthardt.net Open Redirect vulnerability

Vulnerable URL: http://www.luthardt.net/Touren/ArrasDakar2002/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

Fixed in Apache Tomcat 8.5.23

Important: Remote Code Execution CVE-2017-12617 When running with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default servlet to false it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any...

Fixed in Apache Tomcat 9.0.1

Important: Remote Code Execution CVE-2017-12617 When running with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default servlet to false it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any...

GLSA-201709-20 : Postfix: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201709-20 Postfix: Privilege escalation By default, Berkeley DB reads a DBCONFIG configuration file from the current working directory. This is an undocumented behavior. Impact : A local attacker, by using a specially crafted...