Mozilla Firefox ESR Security Advisories (MFSA2017-21, MFSA2017-22) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

openSUSE Security Update : Mozilla Firefox and NSS (openSUSE-2017-1114)

This update to Mozilla Firefox 52.4esr, along with Mozilla NSS 3.28.6, fixes security issues and bugs. The following vulnerabilities advised upstream under MFSA 2017-22 boo1060445 were fixed : - CVE-2017-7793: Use-after-free with Fetch API - CVE-2017-7818: Use-after-free during ARIA array...

Threat Round Up for Sept 22 - Sept 29

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between September 22 and September 29. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior...

nocookie.w55c.net Open Redirect vulnerability

Vulnerable URL: http://nocookie.w55c.net/ct/naioptout.php?actionid=3id=557=http%3A%2F%2Fopenbugbounty.org=1505804102516 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

optout3.jumptap.com Open Redirect vulnerability

Vulnerable URL: http://optout3.jumptap.com/go.aspx?actionid=3id=535=http%3A%2F%2Fopenbugbounty.org=1505804097416 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

festo.com XSS vulnerability

Vulnerable URL: https://www.festo.com/jsl/encorp//FORMDS/form?formid=x" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 36248 VIP website status:| Yes Coordinated Disclosure Timelin...

Threat Outbreak Alert RuleID30703: Email Messages Distributing Malicious Software on September 22, 2017

Medium Alert ID: 55371 First Published: 2017 September 22 16:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30703 may contain the following files: Name ...

mikesplacebars.com XSS vulnerability

Vulnerable URL: http://www.mikesplacebars.com/parties/img/index.php?src="http://www.mikesplacebars.com/parties/img/jungle.jpg=446=631 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

livemint.com XSS vulnerability

Vulnerable URL: http://www.livemint.com/Search/Link/Keyword/1/"'--!KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4337 VIP website status:| Yes Coordinated Disclosure...

werkstatt-betrieb.de XSS vulnerability

Vulnerable URL: https://www.werkstatt-betrieb.de/search?search.text=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E=suchen=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerabilit...

promo.freshtunes.com Open Redirect vulnerability

Vulnerable URL: https://promo.freshtunes.com/en//%5cwww.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 22.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

moose.inl.gov XSS vulnerability

Vulnerable URL: https://moose.inl.gov/AnimalsPortal/SitePages/Home.aspx?FollowSite=0=%27-confirm%28/OPENBUGBOUNTY/%29-%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

SpiderControl SCADA Web Server

CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: SpiderControl Equipment: SCADA Web Server Vulnerability: Directory Traversal AFFECTED PRODUCTS The following versions of SpiderControl SCADA Web Server, a software management platform, are affected: SCADA Web Server...

Path traversal

A Path Traversal CWE-22 vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote authenticated users to download arbitrary files from a system running the product, if this component is...

CVE-2017-7424

CVE-2017-7424 is a Path Traversal (CWE-22) vulnerability in esfadmingui of Micro Focus Enterprise Developer and Enterprise Server . It affects version 2.3, specifically 2.3 Update 1 before Hotfix 8 and 2.3 Update 2 before Hotfix 9 . The flaw enables remote authenticated users to download arbitrar...

Linux/x86-64 - Reverse Shell (192.168.1.2:4444) Shellcode (153 bytes)

Linux/x86-64 - Reverse Shell 192.168.1.2:4444 Shellcode 153 bytes. Shellcode exploit for Linx86-64 platform / ;Title: Linux/x8664 - Reverse Shell Shellcode 192.168.1.2:4444 ;Author: Touhid M.Shaikh ;Contact: https://github.com/touhidshaikh ;Category: Shellcode ;Architecture: Linux x8664...

conservationevidence.com XSS vulnerability

Vulnerable URL:...

arhivach.org XSS vulnerability

Vulnerable URL: https://arhivach.org/add/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16022 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...

Shenzhen, China, a manufacturer of smart cameras exposed vulnerability: at least 17.5 million devices can be remote attack-vulnerability warning-the black bar safety net

Security firms Bitdefender and Checkmarx are released report, security researcher at a plurality of conventional smart cameras found in a remote intrusion vulnerability, relates to the VStarcam, the Loftek, as well as Neo IP camera. One of Neo IP camera is Shenzhen, China manufacturer beautiful...

theweblink.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.theweblink.co.uk/cgibin/loglink.cgi?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.10.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...