Adobe ColdFusion 11 XML External Entity Injection

============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-4264 - APSB16-30 - Release date: 31.08.2016 - Severity: Critical ============================================= I. VULNERABILITY -------------------------...

Adobe ColdFusion 'XML External Entity' Information Disclosure Vulnerability (APSB16-30)

Adobe ColdFusion is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-3437

creationtimestamp| type| source ---|---|--- 2016-08-30 17:57:34+00:00| seen| https://t.me/FullDisclosure/25...

Threat Outbreak Alert RuleID24693: Email Messages Distributing Malicious Software on August 30, 2016

Medium Alert ID: 48656 First Published: 2016 August 30 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24693 may contain the following files: Name |...

wdc-es.custhelp.com XSS vulnerability

Vulnerable URL: http://wdc-es.custhelp.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E/session/L3RpbWUvMTQ3MDkxODc1NS9zaWQvZGpQcE5PWG0= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017...

zFTP 20061220+dfsg3-4.1 Buffer Overflow

Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: zFTP Client Affected value: NAME under FTP connection Where in the code: Line 30 in strcpychk.c strcpychk dest=0xb7f811c0 "/KUIP", src=0xb76a6680 "/MACRO",...

liangs.me Open Redirect vulnerability

Open Bug Bounty ID: OBB-164199 Description| Value ---|--- Affected Website:| liangs.me Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Threat Outbreak Alert RuleID23678: Email Messages Distributing Malicious Software on June 30, 2016

Medium Alert ID: 46951 First Published: 2016 July 1 12:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23678 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID23689: Email Messages Distributing Malicious Software on June 30, 2016

Medium Alert ID: 46958 First Published: 2016 July 1 12:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23689 may contain the following files: Name | Size...

channel.pixnet.net Open Redirect vulnerability

Vulnerable URL: http://channel.pixnet.net/newdirect.php?blog=cr19h3id=0=https%3A%2F%2Fwww.openbugbounty.org%2F Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

CVE-2016-4337

creationtimestamp| type| source ---|---|--- 2016-06-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40046...

Threat Outbreak Alert RuleID23548: Email Messages Distributing Malicious Software on June 30, 2016

Medium Alert ID: 46864 First Published: 2016 June 28 13:52 GMT Last Updated: 2016 June 30 13:29 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23548 and...

IBM Cognos 11.0 Content Spoofing

/ Content Spoofing Vulnerability in IBM Cognos Analytics Applications Advisory 5190 Patch Release - 30 May 2016 Public Release - 03 June 2016 CVE-2016-0398 The IBM Security Bulletins associated with this CVE have been published at the following URLs: IBM Cognos Analytics 11.0...

AirOS NanoStation M2 5.6-beta - Multiple Vulnerabilities

Exploit for cgi platform in category web applications AirOS NanoStation M2 v5.6-beta Arbitrary File Download & Remote Command Execution Tested on: XM.v5.6-beta5.24359.141008.1753 - Build: 2435 Linux Awesome 2.6.32.63 1 Wed Oct 8 17:54:30 EEST 2014 mips unknown Date: May 30, 2016 Informer: Pablo...

ess.ci.juneau.ak.us XSS vulnerability

Vulnerable URL: https://ess.ci.juneau.ak.us/sso/SSOServlet?locale=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Ukrainian Hacker Admits Stealing Corporate Press Releases for $30 Million Profit

A 28-year-old Ukrainian hacker has pleaded guilty in the United States to stealing unpublished news releases and using that non-public information in illegal trading to generate more than $30 Million £20.8 Million in illicit profits. Vadym Iermolovych, 28, admitted Monday that he worked with two...

Threat Outbreak Alert RuleID22579: Email Messages Distributing Malicious Software on April 30, 2016

Medium Alert ID: 44915 First Published: 2016 April 29 13:51 GMT Last Updated: 2016 May 2 12:29 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22579 and...

wiss.ca XSS vulnerability

Vulnerable URL:...

Weather Rise Clock 30+ Widgets - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Weather Rise Clock 30+ Widgets published at the 'play' market has multiple vulnerabilities...

Rollei S-30 WiFi - BSD license, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Rollei S-30 WiFi published at the 'play' market has multiple vulnerabilities...