flash-plugin: multiple code execution issues fixed in APSB15-28

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary...

flash-plugin: multiple code execution issues fixed in APSB15-28

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary...

canit.se XSS vulnerability

Vulnerable URL: http://www.canit.se/per/1" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5211027 Google Pagerank| 3 VIP website status:| No Check canit.se SSL connection:| Grade: ...

bosch.fi XSS vulnerability

Vulnerable URL: http://www.bosch.fi/fi/fi/contactform6/boschcontact.php/1" Details: Description| Value ---|--- Patched:| Yes, at 30.11.2015 Latest check for patch:| 30.11.2015 01:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

deleest.be XSS vulnerability

Vulnerable URL: http://www.deleest.be/site/error.php?url=http%3A%2F%2Fwww.deleest.be%2Fnl%2Fwelkom-19.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerabili...

hanssenstelecom.be XSS vulnerability

Vulnerable URL: http://www.hanssenstelecom.be/site/error.php?url=http%3A%2F%2Fwww.hanssenstelecom.be%2Fnl%2Falarmkoppeling-293.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:|...

Emergency Adobe Flash Player Security Update

The latest version of Adobe Flash Player, which was made available on Tuesday, will have a short shelf life. Adobe will release an emergency Flash update next week after public attacks were carried out against a zero day vulnerability in the latest version of the software, 19.0.0.207, for Windows...

Web Reference Database and bleeding-edge cross-site scripting vulnerabilities

Web Reference Database a.k.a. refbase is a web-based multi-user interface product developed by the refbase community to provide search tools and automated indexing for the management of scientific literature. bleeding-edge is a downloadable version. A cross-site scripting vulnerability exists in...

simons.ca XSS vulnerability

Vulnerable URL: http://www.simons.ca/simons/product/6741-1142101/The+New+Naturals/Solid+chambray+tablecloth?/en/=" Details: Description| Value ---|--- Patched:| Yes, at 27.10.2016 Latest check for patch:| 27.10.2016 13:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Amazon Linux: Security Advisory (ALAS-2011-28)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ironyhome.hk XSS vulnerability

Vulnerable URL: http://www.ironyhome.hk/catalog/tagproducts.php?idtag=627%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

mitnicksecurity.com XSS vulnerability

Vulnerable URL: https://www.mitnicksecurity.com/bowercomponents/modernizr/feature-detects/storage/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 596423 Google Pagerank| 5 VIP...

latostadora.com XSS vulnerability

Vulnerable URL: http://www.latostadora.com/eldiariodemou/1/o1/asd" Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35305 Google Pagerank| 3 VIP website...

Fake EFF Site Used in Spear Phishing Campaign

Attackers, possibly associated with the Russian government, registered a phony Electronic Frontier Foundation domain earlier this month in an attempt to dupe users into thinking correspondence from the site was coming from the well-known privacy watchdog. The scheme, largely carried out via spear...

rotogrinders.com XSS vulnerability

Vulnerable URL: https://rotogrinders.com/lineups/mlb?date=%22%3E%3Ciframe%2fonload%3Dprompt%28%2fXSSposed%2f%29%3E=fanduel Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

PayPal Bug Bounty #119 - Stored Cross Site Vulnerability

Document Title: =============== PayPal Bug Bounty 119 - Stored Cross Site Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1587 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1587 Video: https://www.youtube.com/watch?v=S0vo9FUHo-c Vulnerabilit...

Threat Outbreak Alert RuleID17021: Email Messages Distributing Malicious Software on July 28, 2015

Medium Alert ID: 40196 First Published: 2015 July 29 14:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17021 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID17014: Email Messages Distributing Malicious Software on July 28, 2015

Medium Alert ID: 40192 First Published: 2015 July 28 18:07 GMT Last Updated: 2015 July 29 10:58 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17014 and...

Threat Outbreak Alert RuleID16996: Email Messages Distributing Malicious Software on July 28, 2015

Medium Alert ID: 40186 First Published: 2015 July 28 18:07 GMT Last Updated: 2015 July 30 14:08 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16996 and...

Office, Java Patches Erase Latest APT 28 Zero Days

An APT group thought to be tied to Russia is flying against conventional wisdom, having as recently as the last three weeks dropped its sixth zero-day in the past four months. Given the underground value of unpatched and unreported vulnerabilities, this is highly unusual behavior, even for a...