917 matches found
CVE-2018-16528
creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...
CVE-2018-0251
creationtimestamp| type| source ---|---|--- 2018-12-31 07:31:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/cisco-korjasi-kriittisia-haavoittuvuuksia 2026-08-16 19:00:06+00:00| seen| Telegram/FHGgRnI0iqwpH6ThfywBpIh1BlBlz8uX4HRLECWGC6yQcYE 2026-08-17 00:00:09+00:00| seen|...
Chinese Supply Chain Hardware Attack
Bloomberg is reporting about a Chinese espionage operating involving inserting a tiny chip into computer products made in China. I've written about alternate link this threat more generally. Supply-chain security is an insurmountably hard problem. Our IT industry is inexorably international, and...
CVE-2018-5391
creationtimestamp| type| source ---|---|--- 2018-10-04 07:29:19+00:00| seen| https://t.me/securixykz/19 2018-12-31 08:38:43+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus-ip-pakettien-pilkkomisen-toteutuksissa...
solidaris.be XSS vulnerability
Open Bug Bounty ID: OBB-680848 Description| Value ---|--- Affected Website:| solidaris.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
highfieldscentre.ac.uk Improper Access Control vulnerability
Open Bug Bounty ID: OBB-675977 Description| Value ---|--- Affected Website:| highfieldscentre.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
IT threat evolution Q2 2018
Targeted attacks and malware campaigns Operation Parliament In April, we reported the workings of Operation Parliament, a cyber-espionage campaign aimed at high-profile legislative, executive and judicial organizations around the world – with its main focus in the MENA Middle East and North Afric...
centre-sesame.com XSS vulnerability
Open Bug Bounty ID: OBB-637757 Description| Value ---|--- Affected Website:| centre-sesame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Cross site scripting
An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings - Member Centre - Chinese information - Ordinary member" via a QQ number, as demonstrated by a formqq10= substring...
CVE-2018-11549
An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings - Member Centre - Chinese information - Ordinary member" via a QQ number, as demonstrated by a formqq10= substring...
CVE-2018-11549
CVE-2018-11549 describes a stored XSS in WUZHI CMS 4.1.0, exploitable via the “Account Settings → Member Centre → Chinese information → Ordinary member” form using the QQ number field (form[qq_10]). The underlying cause is injecting script/HTML through that field’s input. Documented impact is a c...
childrens-bed-centre.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-615195 Description| Value ---|--- Affected Website:| childrens-bed-centre.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Solaris 10 (sparc) : 125194-04
Sun Management Centre 3.6.1 PRM: Patch for Solaris 10. Date this patch was last updated by Sun : Feb/27/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
Solaris 10 (sparc) : 127383-01
Sun Management Centre 3.6: Patch for Solaris 10. Date this patch was last updated by Sun : Dec/11/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; i...
centre-clinical.fr XSS vulnerability
Open Bug Bounty ID: OBB-567793 Description| Value ---|--- Affected Website:| centre-clinical.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
buildingcentre.co.uk Open Redirect vulnerability
Open Bug Bounty ID: OBB-562609 Description| Value ---|--- Affected Website:| buildingcentre.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
businessdesigncentre.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-550224 Description| Value ---|--- Affected Website:| businessdesigncentre.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Lenovo Releases Security Advisory
Lenovo has released security updates to address a vulnerability affecting Enterprise Network Operating System ENOS firmware. An attacker could exploit this vulnerability to obtain sensitive information. NCCIC/US-CERT encourages users and administrators to review Lenovo's Security Advisory and the...
synergycarcentre.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-455722 Description| Value ---|--- Affected Website:| synergycarcentre.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
Patch Tuesday, December 2017 Edition
The final Patch Tuesday of the year is upon us, with Adobe and Microsoft each issuing security updates for their software once again. Redmond fixed problems with various flavors of Windows, Microsoft Edge, Office, Exchange and its Malware Protection Engine. And of course Adobe's got another...