Kaspersky Anti-Virus Local CA Root Security Bypass Vulnerability

Kaspersky Anti-Virus products are prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-201612-28 : Docker: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201612-28 Docker: Privilege escalation Docker does not properly distinguish between numeric UIDs and string usernames. Impact : Local attackers could possibly escalate their privileges. Workaround : There is no known workaround at...

Flash Exploit Found in Seven Exploit Kits

A nasty Adobe Flash zero-day vulnerability that was remediated in an emergency update in October 2015 was thereafter co-opted by seven exploit kits, according to an analysis published today by researchers at Recorded Future. The Adobe vulnerability, CVE-2015-7645, was also used by the Russian APT...

Threat Outbreak Alert RuleID26450: Email Messages Distributing Malicious Software on November 28, 2016

Medium Alert ID: 49888 First Published: 2016 November 28 17:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26450 may contain the following files: Name |...

CVE-2016-9315

creationtimestamp| type| source ---|---|--- 2016-11-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41361...

kci.hu Open Redirect vulnerability

Vulnerable URL: http://www.kci.hu/redirect.php?id=NjU1MTg==www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 5400766 VIP website status:| No Check kci....

tubemogul.com XSS vulnerability

Vulnerable URL: https://www.tubemogul.com/insights/?industry=politics" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 50154 VIP website status:| No Check...

Microsoft Says Russian Hackers Using Unpatched Windows Bug Disclosed by Google

Google's Threat Analysis Group publically disclosed on Monday a critical zero-day vulnerability in most versions of Windows just 10 days after privately disclosed both zero days to Microsoft and Adobe. While Adobe rushed an emergency patch for its Flash Player software on October 26, Microsoft ha...

Threat Outbreak Alert RuleID25784: Email Messages Distributing Malicious Software on October 28, 2016

Medium Alert ID: 49522 First Published: 2016 October 28 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25784 may contain the following files: Name |...

Threat Outbreak Alert RuleID25910: Email Messages Distributing Malicious Software on October 28, 2016

Medium Alert ID: 49519 First Published: 2016 October 28 14:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25910 may contain the following files: Name |...

CVE-2016-6653

The MariaDB auditplugin component in Pivotal Cloud Foundry PCF cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials...

voronezh.tis.ru XSS vulnerability

Vulnerable URL: http://voronezh.tis.ru/search/products/?sq=%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2330080 VIP website...

VLC Media Player 2.2.1 Buffer Overflow

Exploit Title: VLC Media Player 2.2.1 Buffer Overflow 2016-09-28 Author: sultan albalawi Software Link: https://www.videolan.org/vlc/releases/2.2.1.html Tested on:win7 video...

miabbono.com XSS vulnerability

Vulnerable URL: http://www.miabbono.com/ricerca.htm?sezione==" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 777455 VIP website status:| No Check...

bigdatauniversity.com.cn XSS vulnerability

Vulnerable URL: https://bigdatauniversity.com.cn/?s=999%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

втормет-нк.рф Open Redirect vulnerability

Vulnerable URL: http://втормет-нк.рф/redirect/?service=catalog=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

pushkino.pw Open Redirect vulnerability

Vulnerable URL: http://pushkino.pw/redirect?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:48 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 29169291 VIP websit...

nopCommerce 3.70 Cross Site Scripting

Security Advisory CVE-ID: N/A Topic: Reflected Cross Site Scripting XSS Vulnerability in "successful registration" page Class: Input Validation Severity: Medium Discovery: 2016-04-28 Vendor Notification: 2016-04-28 Vendor response: 2016-05-30 Vendor Patch: 2016-05-31 Public Announced: 2016-08-15...

Threat Outbreak Alert RuleID24020: Email Messages Distributing Malicious Software on July 28, 2016

Medium Alert ID: 48277 First Published: 2016 July 28 13:49 GMT Last Updated: 2016 July 28 19:11 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24020 and...

pyknet.net XSS vulnerability

Vulnerable URL: http://pyknet.net/submit.php?srchstring=%5B%27%27%5D%22%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 71948 VIP website...