Threat Outbreak Alert RuleID30763: Email Messages Distributing Malicious Software on September 28, 2017

Medium Alert ID: 55404 First Published: 2017 September 28 16:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30763 may contain the following files: Name ...

funpers.com XSS vulnerability

Vulnerable URL: http://funpers.com/68355 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 650893 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

CVE-2017-14086

creationtimestamp| type| source ---|---|--- 2017-09-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42892...

dortmund.de XSS vulnerability

Open Bug Bounty ID: OBB-317066 Description| Value ---|--- Affected Website:| dortmund.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Adobe Flash Player Within Google Chrome Security Update (APSB17-28) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayerchrome"...

Taringa: Over 28 Million Users' Data Exposed in Massive Data Breach

Exclusive — If you have an account on Taringa, also known as "The Latin American Reddit," your account details may have compromised in a massive data breach that leaked login details of almost all of its over 28 million users. Taringa is a popluar social network geared toward Latin American users...

werkstatt-betrieb.de XSS vulnerability

Vulnerable URL: https://www.werkstatt-betrieb.de/search?search.text=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E=suchen=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerabilit...

mborayhu.coop.py XSS vulnerability

Vulnerable URL: http://www.mborayhu.coop.py/galeria.php?=2%22%27--!%3E%3Cscript%3EalertOPENBUGBOUNTY%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

addoil.com XSS vulnerability

Vulnerable URL: http://www.addoil.com/search/%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 167753 VIP website status:| No...

sk.fashionnetwork.com XSS vulnerability

Vulnerable URL: http://sk.fashionnetwork.com/search/?p0=rootbyte Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

Threat Outbreak Alert RuleID30370: Email Messages Distributing Malicious Software on August 28, 2017

Medium Alert ID: 54966 First Published: 2017 August 28 16:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30370 may contain the following files: Name |...

fortbildung-regional.de XSS vulnerability

Vulnerable URL: https://fortbildung-regional.de/suchen/sucheveranstaltung.php?selectedrow=1abfrage=c=ax Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1199756...

so.28.com XSS vulnerability

Vulnerable URL: http://so.28.com/Index/dosearch?keyword=1%22%27--!%3E%3CScript%20/K/%3Econfirm/OPENBUGBOUNTY/%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Threat Outbreak Alert RuleID30010: Email Messages Distributing Malicious Software on July 28, 2017

Medium Alert ID: 54619 First Published: 2017 July 28 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30010 may contain the following files: Name | Siz...

CVE-2017-3131

creationtimestamp| type| source ---|---|--- 2017-07-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42388...

dnevnik.si XSS vulnerability

Vulnerable URL: https://dnevnik.si/iskalnik?q=a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3E%3C/title%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

fpf.pt Open Redirect vulnerability

Open Bug Bounty ID: OBB-253961 Description| Value ---|--- Affected Website:| fpf.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

jobinventory.com XSS vulnerability

Vulnerable URL: http://www.jobinventory.com/search?q=%3E%27%3E%22%3Ee%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E=%3E%27%3E%22%3Ee%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017...

Cannot Start App - Federation Authentication Service

The application launch fails with an error "Cannot Start App" once FAS is enabled on the StoreFront. On the StoreFront you will see Event ID 28 and on FAS server you will see Event ID 123...

FineCMS Cross-Site Scripting Vulnerability (CNVD-2017-10157)

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the search page in FineCMS versions 2017-05-28 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTM...