Fedora Update for python-pillow FEDORA-2016-6

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Android - IOMX 'getConfig'/'getParameter' Information Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=711 Android: Information Disclosure in IOMX getConfig/getParameter Platform: Verified on google/razor/flo:6.0.1/MMB29O/2459718:user/release-keys Class: Information Disclosure Summary: The GETCONFIG and GETPARAMETER calls on IOMX ar...

bosch-professional.com XSS vulnerability

Vulnerable URL: http://www.bosch-professional.com/boptbeusearchfrontend/de/de/search/search.htm?searchVal=%22%3E%3Csvg%2Fonload%3Dal%26%23101rt%26%2340%2FXSSPOSED%2F%26%2341%2F%2F Details: Description| Value ---|--- Patched:| Yes, at 24.11.2016 Latest check for patch:| 24.11.2016 11:16 GMT...

CVE-2016-2086

Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header...

osijek031.com XSS vulnerability

Vulnerable URL: http://www.osijek031.com/osijek.php?catid=1%22%3E%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 223602 Google...

quotidianodipuglia.it XSS vulnerability

Vulnerable URL: http://www.quotidianodipuglia.it/?p=search=%22%3E%3Csvg%2Fonload%3Dalert%28%2Fxssposed%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 150491 Google Pageran...

RHEL 5 : JBoss EAP (RHSA-2016:0595)

A Red Hat JBoss Enterprise Application Platform update is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

Threat Outbreak Alert RuleID22100: Email Messages Distributing Malicious Software on April 5, 2016

Medium Alert ID: 44503 First Published: 2016 April 6 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22100 may contain the following files: Name | Siz...

weather-wherever.co.uk XSS vulnerability

Vulnerable URL: http://www.weather-wherever.co.uk/account/ Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 211147 Google Pagerank| 5 VIP website status:| N...

allcinema.net XSS vulnerability

Vulnerable URL: http://www.allcinema.net/prog/searchall.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17294 Google Pagerank| 5 VIP website status:| Yes Check allcinema.net SSL...

Threat Outbreak Alert RuleID22078: Email Messages Distributing Malicious Software on April 5, 2016

Medium Alert ID: 44489 First Published: 2016 April 5 19:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22078 may contain the following files: Name | Siz...

Oracle Linux 5 : openssh (ELSA-2016-3531)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3531 advisory. - CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices John Haxby orabug 22985024 Tenable has extracted the preceding...

April 2016 Google Android Nexus Security Bulletin

Google has patched a vulnerability being exploited in the wild to root Nexus 5 Android devices. The public exploit—a rooting application—was privately disclosed to Google on March 15 by Zimperium researchers, and a less than a month after CORE Team researchers reported that CVE-2015-1805, which w...

Modern Combat 5: Blackout - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Modern Combat 5: Blackout published at the 'play' market has multiple vulnerabilities...

corsidf.df.unipi.it XSS vulnerability

Vulnerable URL: https://corsidf.df.unipi.it/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg==%3D%3D=true=030BB Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

CVE-2016-1503

dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a malform...

mydaily.co.kr XSS vulnerability

Vulnerable URL: http://mydaily.co.kr/newyk/html/searchmj.php?search=%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31161 Google...

Free Grade 5 Math English 5th - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free Grade 5 Math English 5th published at the 'play' market has multiple vulnerabilities...

ZENONIA® 5 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application ZENONIA® 5 published at the 'play' market has multiple vulnerabilities...

Real Gangster 5 - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Real Gangster 5 published at the 'play' market has multiple vulnerabilities...