CVE-2017-9563

The First Citizens Community Bank fccb/id809930960 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9571

The CVE-2017-9571 entry concerns the Citizens Community Bank ccb-mobile-banking/id610030469 iOS app 3.0.1, which does not verify X.509 certificates from SSL servers. This allows a man-in-the-middle attacker to spoof HTTPS servers and obtain sensitive information via a crafted certificate. Documen...

CVE-2017-9585

CVE-2017-9585 affects the iOS app “Community State Bank - Lamar Mobile Banking” (version 3.0.3). The root cause is that the app does not verify X.509 certificates when connecting to SSL servers, which enables man-in-the-middle (MITM) attackers to spoof servers and obtain sensitive data via a craf...

CVE-2017-9563

CVE-2017-9563 affects the iOS app for First Citizens Community Bank (fccb/id809930960) version 3.0.1. The issue is that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. E...

CVE-2017-9576

The "Middleton Community Bank Mobile Banking" by Middleton Community Bank app 3.0.0 -- aka middleton-community-bank-mobile-banking/id721843238 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information vi...

CVE-2017-9576

CVE-2017-9576 affects the iOS version of the Middleton Community Bank Mobile Banking app (3.0.0), where the app does not verify X.509 certificates when establishing SSL/TLS connections. This weakness can allow a man-in-the-middle attacker to spoof legitimate servers and exfiltrate sensitive infor...

FIRST and Beyond – a History of Elevating Research through Partnerships

At the FIRST conference in San Juan, Trend Micro’s Forward-looking Threat Research team will be presenting four sessions on a wide range of topics. These sessions will demonstrate a sliver of the research going on at Trend Micro, and some of the partnerships that elevate the research to benefit t...

community.egroupware.org XSS vulnerability

Vulnerable URL: http://community.egroupware.org/index.php?wikipage=CalendarXmlRpc"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

BlueHat v17 Call for Papers Opens

Calling security professionals and enthusiasts throughout the world. Microsoft is pleased to open the Call for Papers for our BlueHat v17 Security Conference. Potential speakers have from June 1st through August 18th to submit abstract proposals for this unique opportunity. As in past events, we...

BlueHat v17 Call for Papers Opens

Calling security professionals and enthusiasts throughout the world. Microsoft is pleased to open the Call for Papers for our BlueHat v17 Security Conference. Potential speakers have from June 1st through August 18th to submit abstract proposals for this unique opportunity. As in past events, we...

Piwigo Plugin Facetag 0.0.3 - Cross-Site Scripting

Exploit Title: Piwigo plugin Facetag , Persistent XSS Date: 31-05-2017 Extension Version: 0.0.3 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=845 Exploit Author: Touhid M.Shaikh Contact: http://twitter.com/touhidshaikh22 Website:...

Simple ASC CMS 1.2 Cross Site Scripting

Document Title: =============== Simple ASC CMS v1.2 - Guestbook Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2072 Release Date: ============= 2017-05-21 Vulnerability Laboratory ID VL-ID: ====================================...

Simple ASC CMS v1.2 - (Guestbook) Persistent Vulnerability

Document Title: =============== Simple ASC CMS v1.2 - Guestbook Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2072 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15947 CVE-ID: ======= CVE-2017-15947 Release Date:...

Simple ASC CMS v1.2 - Guestbook Persistent Vulnerability

Document Title: =============== Simple ASC CMS v1.2 - Guestbook Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2072 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15947 CVE-ID: ======= CVE-2017-15947 Release Date:...

ExtraTorrent Joins Kickass Torrents in Permanent Shutdown

After the closures of Kickass Torrents and Torrentz.eu, the torrent community now bids farewell to ExtraTorrent, once the second most popular torrent site worldwide. ExtraTorrent has officially shut down. Users should stop searching for 'extratorrents unblock' and 'extratorrents proxy' websites. ...

community.rsa.com Open Redirect vulnerability

Vulnerable URL: https://community.rsa.com/external-link.jspa?url=http://openbugbounty%E3%80%82org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

Invision Power Services Community Suite IPS UTF8 Converter Cross Site Scripting Vulnerability

Invision Power Services IPS Community Suite is an integrated application for building communities on the web.IPS UTF8 Converter is one of these transcoders. A cross-site scripting vulnerability exists in IPS UTF8 Converter version 1.1.18 in IPS Community Suite 4.1.19.2 and earlier. A remote...

Invision Power Services Community Suite Cross-Site Scripting Vulnerability

Invision Power Services IPS Community Suite is an integrated application for building communities on the web. A cross-site scripting vulnerability exists in Announcements in IPS Community Suite 4.1.19.2 and earlier. A remote attacker can exploit this vulnerability by leveraging the...

Invision Power Services Community Suite Cross-Site Scripting Vulnerability (CNVD-2017-06920)

Invision Power Services IPS Community Suite is an integrated application for building communities on the web. A cross-site scripting vulnerability exists in IPS Community Suite versions 4.1.19.2 and earlier. A remote attacker could exploit this vulnerability to gain access to...

WannaCry Update: Vulnerable SMB Shares Are Widely Deployed And People Are Scanning For Them

WannaCry Overview Last week the WannaCry ransomware worm, also known as Wanna Decryptor, Wanna Decryptor 2.0, WNCRY, and WannaCrypt started spreading around the world, holding computers for ransom at hospitals, government offices, and businesses. To recap: WannaCry exploits a vulnerability in the...