Threat Outbreak Alert RuleID32812: Email Messages Distributing Malicious Software on May 23, 2018

Medium Alert ID: 57941 First Published: 2018 May 23 16:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32812 may contain the following files: Name | Size...

CVE-2018-8898

creationtimestamp| type| source ---|---|--- 2018-05-23 08:20:33+00:00| published-proof-of-concept| https://t.me/antichat/1492...

CVE-2018-11251

In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...

auto.volotea.com XSS vulnerability

Open Bug Bounty ID: OBB-616955 Description| Value ---|--- Affected Website:| auto.volotea.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

HRSALE The Ultimate HRM v1.0.2 - CSV Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: HRSALE The Ultimate HRM 1.0.2 - CSV Injection Exploit Author: 8bitsec CVE: CVE-2018-10257 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619 Version: 1.0.2 Tested...

mtkiscowines.com XSS vulnerability

Open Bug Bounty ID: OBB-607979 Description| Value ---|--- Affected Website:| mtkiscowines.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rcpbuyersguide.com XSS vulnerability

Open Bug Bounty ID: OBB-607337 Description| Value ---|--- Affected Website:| rcpbuyersguide.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

advertising.amazon.in XSS vulnerability

Open Bug Bounty ID: OBB-606871 Description| Value ---|--- Affected Website:| advertising.amazon.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Google Play Boots Three Malicious Apps From Marketplace Tied to APTs

Two advanced persistent threat groups managed to sneak apps onto the Google Play marketplace earlier this year. Both were designed to conduct surveillance on targets located in the Middle East region, according to Lookout security researchers. One of the groups, identified as APT-C-23 also known ...

Open redirect

The fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions before 6.1.3 and 5.6.7 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website...

chinese.globalreach.org XSS vulnerability

Open Bug Bounty ID: OBB-586310 Description| Value ---|--- Affected Website:| chinese.globalreach.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

thesurrealist.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-586178 Description| Value ---|--- Affected Website:| thesurrealist.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

womanroad.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-585734 Description| Value ---|--- Affected Website:| womanroad.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hoppist.com XSS vulnerability

Open Bug Bounty ID: OBB-585582 Description| Value ---|--- Affected Website:| hoppist.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7422

creationtimestamp| type| source ---|---|--- 2018-03-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44340 2024-06-22 09:28:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/55 2025-08-16 09:00:04+00:00| published-proof-of-concept|...

Solaris 10 (x86) : 118668-19

JavaSE for business 5.0x86: update 18 pat. Date this patch was last updated by Sun : Mar/23/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 126357-06

Sun Java System Access Manager 7.1 Solarisx86. Date this patch was last updated by Sun : Apr/23/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (sparc) : 120189-23

StarSuite 8 Solaris: Update 18. Date this patch was last updated by Sun : Mar/15/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 148105-23

SunOS 5.10x86: last, ssh/sshd patch. Date this patch was last updated by Sun : Jun/09/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Solaris 10 (sparc) : 148104-23

SunOS 5.10: last, ssh/sshd patch. Date this patch was last updated by Sun : Jun/09/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...