Tweek!DM Document Management Bypass / SQL Injection

https://www.osisecurity.com.au/tweekdm-document-management-authentication-bypass-sql-injection-vulnerabilities.html Date: 04-Apr-2017 Product: Tweek!DM Document Management Versions affected: Unknown Vulnerabilities: 1 Authentication bypass - the software sends a 301 Location redirect back to the...

Kaseya VSA 6.5.0.0 XSS / Brute Force

https://www.osisecurity.com.au/kaseya-parameter-reflected-xss-enumeration-and-bruteforce-weakness.html Date: 04-Apr-2017 Software: Kaseya Affected version: Kaseya VSA v6.5.0.0. Vulnerability details: 1. The "forgot password" function at https://target/access/logon.asp reveals whether a username i...

Airwatch 6.1.x / 6.4.x LDAP Injection

https://www.osisecurity.com.au/airwatch-self-service-portal-username-parameter-ldap-injection.html Date: 04-Apr-2017 Product: AirWatch Self Service MDM Versions affected: v6.1.x v6.4.x Vulnerability: LDAP injection Example: https://target/DeviceManagement/ URL accepts the following POST parameter...

XSS Vulnerability in wiki markup

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-51825. panel Luke Jahnke of the Australia Post Digital Mailbox Security Team reported to Atlassian an XSS in nesting various...

XSS Vulnerability in wiki markup

Luke Jahnke of the Australia Post Digital Mailbox Security Team reported to Atlassian an XSS in nesting various markup...

opals-australia.com XSS vulnerability

Vulnerable URL: http://www.opals-australia.com/index.php?page=contentPage%27"--!confirmOPENBUGBOUNTY%3C/script /K/=productLanding' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

probonoaustralia.com.au XSS vulnerability

Vulnerable URL: https://probonoaustralia.com.au/search-news/?type=news=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

engineersaustralia.org.au XSS vulnerability

Vulnerable URL: https://www.engineersaustralia.org.au/portal/news?search=%20%22%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%28/OPENBUGBOUNTY/%29%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Increased Risks from Macro-Based Malware

Microsoft Office applications use macros to automate routine tasks. However, macros can contain malicious code that can be used to exploit vulnerable systems. Recently, there has been a resurgence of malware that is spread via macros. Individuals and organizations should proactively secure system...

From Australia driving license, steal the user's identity information-vulnerability warning-the black bar safety net

It is understood that the criminals may be from the Australia driver license in stealing the user's identity information, and the relevant authorities aware of this situation after, and not re-distribute new driver's license number, so that the victims for many years are affected by this problem...

caltex.com.au XSS vulnerability

Vulnerable URL: http://www.caltex.com.au/Search/results.aspx?k=' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 326956 VIP website status:| No Check caltex.com.au SSL connection:| Grade: F Coordinated Disclosure...

WikiCamps Australia - Exported ContentProvider, Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application WikiCamps Australia published at the 'play' market has multiple vulnerabilities...

TV Guide Australia ON AIR - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TV Guide Australia ON AIR published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID21868: Email Messages Distributing Malicious Software on March 25, 2016

Medium Alert ID: 44298 First Published: 2016 March 25 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21868 may contain the following files: Name | Si...

3m.com.au XSS vulnerability

Vulnerable URL: http://www.3m.com.au/3M/enAU/company-au/all-3m-products/?N=5002385+8711017=%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C%2Fscript%3E=enAU=cc=scBR=rs=cc Details: Description| Value ---|--- Patched:| Yes, at 01.10.2016 Latest check for patch:| 01.10.2016 10:32 GMT Vulnerability type:| XS...

bicyclingaustralia.com.au Open Redirect vulnerability

Vulnerable URL: http://bicyclingaustralia.com.au/revive-adserver-3.0.5/www/delivery/ck.php?oaparams=2bannerid=845zoneid=38cb=05d0c2f685oadest=https://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability...

australia.msn.to vulnerability

Vulnerable URL: http://www.australia.msn.to/rank.php?mode=link=641=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP website status:| ...

aig.com.au XSS vulnerability

Vulnerable URL: http://www.aig.com.au/search-results?q=%3CIMG+%22%22%22%3E%3CSCRIPT%3Ealert%28%22XSSPOSED%22%29%3C%2FSCRIPT%3E%22%3E Details: Description| Value ---|--- Patched:| Yes, at 21.12.2015 Latest check for patch:| 21.12.2015 11:25 GMT Vulnerability type:| XSS Vulnerability status:|...

Google’s $85 Chromebit Lets You Turn Any Monitor or TV into a Computer

Google and Asus are finally ready to release their new micro Chrome OS computer called the Chromebit — that retails at a great price, just $85. That is quite cheap for what is essentially a portable computer that you can take anywhere in your pocket. Also Read: CHIP — The World's First $9 Compute...

audible.com.au XSS vulnerability

Vulnerable URL: http://www.audible.com.au/adblbestsellers/%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E?ipRedirectOverride=true Details: Description| Value ---|--- Patched:| Yes, at 24.11.2015 Latest check for patch:| 24.11.2015 00:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...