Facebook Security Exec Calls for Tightened Data Privacy

Facebook’s outgoing chief information security officer Alex Stamos has urged the social media company to rethink its approach to data privacy. The executive, whose exit has been widely reported on for months, wrote an internal note to staff that called for changes in how Facebook approaches data...

CVE-2018-13162

The mintToken function of a smart contract implementation for ALEX, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mintToken function of a smart contract implementation for ALEX, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13162

The mintToken function of a smart contract implementation for ALEX, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13162

The CVE concerns the ALEX Ethereum token’s smart contract: the mintToken function contains an integer overflow that allows the contract owner to set any user’s balance to an arbitrary value. This is the root cause and directly enables a high-integrity impact (per CVSS3: HIGH) with network-based a...

alex-y.co.il XSS vulnerability

Open Bug Bounty ID: OBB-582678 Description| Value ---|--- Affected Website:| alex-y.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Memcached - memcrashed Denial of Service Exploit

Exploit for linux platform in category dos / poc Written by Alex Conrey Download: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/44254.zip This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public...

Easy!Appointments 1.2.1 - Cross-Site Scripting

Easy!Appointments 1.2.1 - Cross-Site Scripting Easy!Appointments v1.2.1 Multiple Stored XSS Vulnerabilities Vendor: Alex Tselegidis Product web page: http://www.easyappointments.org Affected version: 1.2.1 Summary: Easy!Appointments is a highly customizable web application that allows your...

Moderate: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

job.sy XSS vulnerability

Vulnerable URL: http://job.sy/index.php?id=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 62452 VIP website status:| No Coordinated...

joomlinks.org Open Redirect vulnerability

Vulnerable URL: http://joomlinks.org/?url=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 01.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 841156 VIP website status:| No...

pfalzwerke.de XSS vulnerability

Vulnerable URL: http://www.pfalzwerke.de/privatkunden/8093.php?ort=%3E%27%3E%22%3Es%3Ci%3Ei%3Cimg+src%3Dx+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E=ort=1\n Details: Description| Value ---|--- Patched:| Yes, at 13.11.2017 Latest check for patch:| 13.11.2017 07:49 GMT Vulnerability type:| XSS...

Black Hat USA 2017 Preview

Mike Mimoso and Tom Spring preview Black Hat, which starts tomorrow in Las Vegas, including some thoughts on what call to action Facebook CSO Alex Stamos may deliver in his keynote address, along with some important topics and sessions that are sure to pop up throughout the week. Download: Black...

czestochowa.wku.wp.mil.pl XSS vulnerability

Vulnerable URL: http://czestochowa.wku.wp.mil.pl/files/czestochowa/file/filmy/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched...

Alex Guestbook 5.0.4 Cross Site Scripting

Exploit Title: Alex Guestbook Version 5.0.4 - Cross Site Scripting Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home : http://www.alexguestbook.net/ Home : http://persian-team.ir/ Google Dork : inurl:alexguestbook3 Telegram Channel: @PersianHackTeam Teste...

glghs.ntpc.edu.tw XSS vulnerability

Vulnerable URL: http://www.glghs.ntpc.edu.tw/school/newscon.php?lang=%22%3Etro%20lo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E=453=1=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

mit4mit.co.il Open Redirect vulnerability

Vulnerable URL: https://www.mit4mit.co.il/redirecturl/?type=website=www.openbugbounty.org=asdfid=111 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 441560 VIP website...

Vulnerability in OpenSSL - SSL_peek() hang on empty record

OpenSSL 1.1.0 SSL/TLS will hang during a call to SSLpeek if the peer sends an empty record. This could be exploited by a malicious peer in a Denial Of Service attack...

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-004

Users without "Administer comments" can set comment visibility on nodes they can edit. Less critical Users who have rights to edit a node, can set the visibility on comments for that node. This should be restricted to those who have the administer comments permission. Cross-site Scripting in http...

Infoblox 7.0.1 CRLF Injection / HTTP Response Splitting

Exploit Title: CVE-2016-6484 Infoblox Network Automation CRLF Injection/ HTTP splitting vulnerability Product: Infoblox Network Automation Vulnerable Versions: 7.0.1 and all previous versions Tested Version: 6.9.2 Advisory Publication: 06/09/2016 Vulnerability Type: CWE-113: Improper Neutralizati...