Trendmicro InterScan Remote Root Access Vulnerability

Vulnerability Details Affected Vendor: Trendmicro Affected Product: InterScan Web Security Virtual Appliance Affected Version: OS Version 3.5.1321.el6.x8664; Application Version 6.5-SP2BuildLinux1548 Platform: Embedded Linux CWE Classification: CWE-22: Improper Limitation of a Pathname to a...

JVN#81618356: CubeCart vulnerable to directory traversal

CubeCart from CubeCart Limited is an open source system for creating online shopping websites. CubeCart contains a directory traversal vulnerability CWE-22. Impact A local file on the server may be accessed by a remote attacker. Solution Update the Software Update to the latest version according ...

Linux/x86_64 - execve /bin/sh Shellcode (22 bytes)

;The MIT License MIT ;Copyright c 2017 Robert L. Taylor ;Permission is hereby granted, free of charge, to any person obtaining a ;copy of this software and associated documentation files the “Software”, ;to deal in the Software without restriction, including without limitation ;the rights to use,...

JVN#28331227: MaruUo Factory's multiple AttacheCase products vulnerable to directory traversal

Multiple AttacheCase products provided by MaruUo Factory contain a directory traversal vulnerability CWE-22 due to a flaw in processing filenames in ATC files. Impact Decrypting a crafted ATC file may result in creation of an arbitrary file or overwriting of an existing file. Solution Update the...

JVN#83917769: AttacheCase vulnerable to directory traversal

AttacheCase is an open source file encryption software provided by HiBARA Software. AttacheCase contains a directory traversal vulnerability CWE-22 due to a flaw in processing filenames in ATC files. Impact Decrypting a crafted ATC file may result in creation of an arbitrary file or overwriting o...

acabins.com XSS vulnerability

Vulnerable URL: http://www.acabins.com/emailafriend.php?referralPage=www.acabins.com/pigeonforge/cabins/WolfDen/index.php=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:|...

Threat Outbreak Alert RuleID27013: Email Messages Distributing Malicious Software on December 22, 2016

Medium Alert ID: 52211 First Published: 2016 December 22 16:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27013 may contain the following files: Name |...

Threat Outbreak Alert RuleID27011: Email Messages Distributing Malicious Software on December 22, 2016

Medium Alert ID: 52209 First Published: 2016 December 22 16:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27011 may contain the following files: Name |...

Threat Outbreak Alert RuleID27010: Email Messages Distributing Malicious Software on December 22, 2016

Medium Alert ID: 52208 First Published: 2016 December 22 15:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27010 may contain the following files: Name |...

CVE-2016-7621

creationtimestamp| type| source ---|---|--- 2016-12-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40956...

tools.tracemyip.org Open Redirect vulnerability

Vulnerable URL: http://tools.tracemyip.org/IPv6-decimal-to-ip-converter/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

JVN#16200242: Cybozu Garoon vulnerable to directory traversal

Cybozu Garoon provided by Cybozu,Inc. is a groupware. Cybozu Garoon contains a directory traversal vulnerability CWE-22. Impact A user may obtain arbitrary files managed by the product. Solution Update the Software Update to the latest version according to the information provided by the develope...

GLSA-201612-22 : Coreutils: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201612-22 Coreutils: Arbitrary code execution A memory corruption flaw in GNU Coreutils parsedatetime function was reported. Applications using parsedatetime, such as touch or date, may accepted untrusted input. Impact : A remote...

www1.staging.mcdonalds.com XSS vulnerability

Vulnerable URL: http://www1.staging.mcdonalds.com/googleapps/GoogleArabicSearchAction.do?method=googlesearchLocation=kw=ar=';alert/OPENBUGBOUNTY/;x=' Details: Description| Value ---|--- Patched:| Yes, at 26.09.2017 Latest check for patch:| 26.09.2017 23:04 GMT Vulnerability type:| XSS Vulnerabili...

kotak.com XSS vulnerability

Vulnerable URL: http://www.kotak.com/sme/?utmmedium=';alertOPENBUGBOUNTY;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2996 VIP website status:| Yes Coordinated Disclosure...

Atlassian Confluence AppFusions Doxygen 1.3.0 Path Traversal

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AppFusions Doxygen for Atlassian Confluence Vendor URL: www.appfusions.com Type: Path Traversal CWE-22 Date found: 2016-06-23 Date published: - CVSSv3 Score: 6.3...

58hyip.com XSS vulnerability

Vulnerable URL: http://www.58hyip.com/index.php?a=details=bitcoin%22%3E%3C/title%3E%3C/script%3E%27%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E22.biz Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

talentsmart.com XSS vulnerability

Vulnerable URL: http://www.talentsmart.com/articles/share.php?title=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 126930 VIP website status:| No Coordinated Disclosure Timeline:...

gastrohep.net Open Redirect vulnerability

Vulnerable URL: http://www.gastrohep.net/adverts/redirect.asp?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

rustorg.net Open Redirect vulnerability

Vulnerable URL: http://rustorg.net/Redirect.aspx?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 3405415 VIP website status:| No Check...