CVE-2017-0521

creationtimestamp| type| source ---|---|--- 2017-03-18 20:12:15+00:00| published-proof-of-concept| https://t.me/canyoupwnme/972 2017-03-20 01:30:50+00:00| seen| https://t.me/HackerOne/599...

AXIS Network Camera Cross Site Scripting

I. ADVISORY INFORMATION ----------------------- Title: Axis Network Cameras Multiple Cross-site scripting Vendor: Axis Communications Class: Improper Input Validation CWE-20 CVE Name: CVE-2015-8256 Remotely Exploitable: Yes Locally Exploitable: No OLSA-ID: OLSA-2015-8256 vulnerability -----------...

AXIS Communications - Cross-Site Scripting Content Injection

AXIS Communications - Cross-Site Scripting Content Injection 0RWELLL4BS security advisory olsa-2015-8258 PGP: 79A6CCC0 @orwelllabs Advisory Information ==================== - Title: ImagePath Resource Injection/Open script editor - Vendor: AXIS Communications - Research and Advisory: Orwelllabs -...

AXIS Communications XSS / Content Inclusion

0RWELLL4BS security advisory olsa-2015-8258 PGP: 79A6CCC0 @orwelllabs Advisory Information ==================== - Title: ImagePath Resource Injection/Open script editor - Vendor: AXIS Communications - Research and Advisory: Orwelllabs - Class: Improper Input Validation CWE-20 - CVE Name:...

Fixed in Apache Tomcat 9.0.0.M18

Low: Information Disclosure CVE-2017-5648 While investigating bug 60718, it was noticed that some calls to application listeners did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to...

steegen.at XSS vulnerability

Vulnerable URL: http://www.steegen.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14150447 VIP website status:| No Check...

guessthespot.com XSS vulnerability

Vulnerable URL: http://www.guessthespot.com/index.php?catid=3%22%3Ehead%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C%2Fscript%3Ehead%22%3E%22%00 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

CVE-2016-9364

An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via path traversal allows an attacker to access arbitrary files and directories on the server...

CVE-2016-9364

An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via path traversal allows an attacker to access arbitrary files and directories on the server...

Path traversal

An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via path traversal allows an attacker to access arbitrary files and directories on the server...

CVE-2016-9364

An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via path traversal allows an attacker to access arbitrary files and directories on the server...

CVE-2016-9364

CVE-2016-9364 affects Fidelix FX-20 series controllers (versions prior to 11.50.19). The vulnerability is a path traversal weakness that allows an attacker to perform arbitrary file reading, accessing files and directories on the server. Exploitation is described as remote in the ICS-CERT advisor...

Threat Outbreak Alert RuleID27335: Email Messages Distributing Malicious Software on January 20, 2017

Medium Alert ID: 52373 First Published: 2017 January 20 19:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27335 may contain the following files: Name |...

at-eat.com XSS vulnerability

Vulnerable URL: http://www.at-eat.com/phpinfo.php?GLOBALStest=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30572712 VIP website...

tools.tracemyip.org Open Redirect vulnerability

Vulnerable URL: http://tools.tracemyip.org/IPv6-decimal-to-ip-converter/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Threat Outbreak Alert RuleID26963: Email Messages Distributing Malicious Software on December 20, 2016

Medium Alert ID: 52171 First Published: 2016 December 20 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26963 may contain the following files: Name |...

GLSA-201612-20 : jq: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201612-20 jq: Buffer overflow An off-by-one error was discovered in the tokenadd function in jvparse.c which triggers a heap-based buffer overflow. Impact : A remote attacker could trick a victim into processing a specially crafte...

Bypass white-list protection for URL redirection

PMASA-2016-66 Announcement-ID: PMASA-2016-66 Date: 2016-11-25 Updated: 2016-12-06 Summary Bypass white-list protection for URL redirection Description Due to the limitation in URL matching, it was possible to bypass the URL white-list protection. Severity We consider this vulnerability to be of...

libgcrypt: PRNG output is predictable

A design flaw was found in the libgcrypt PRNG Pseudo-Random Number Generator. An attacker able to obtain the first 580 bytes of the PRNG output could predict the following 20 bytes...

CAREL PlantVisor Enhanced Authentication Bypass Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified an authorization bypass vulnerability in CAREL’s PlantVisor application. CAREL has confirmed that this vulnerability refers to the phased-out CAREL product PlantVisorEnhanced and is no longer supported. This vulnerability could be exploite...