filsonkorea.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-481596 Description| Value ---|--- Affected Website:| filsonkorea.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

QIWI: https://fundl.qiwi.com CSRF на подтверждении sms

Доброго времени суток. Я тут нашел достаточно серьезную CSRF, как мне кажется. Она позволяет привязать номер телефона злоумышленника - угнать деньги. И основана она отчасти на старой CSRF, которую я репортил совсем недавно https://hackerone.com/reports/300676 Так вот, тогда я не доглядел еще одну...

tce.ro.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-456382 Description| Value ---|--- Affected Website:| tce.ro.gov.br Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Threat Outbreak Alert RuleID31629: Email Messages Distributing Malicious Software on December 18, 2017

Medium Alert ID: 56289 First Published: 2017 December 18 18:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31629 may contain the following files: Name |...

nextlevelbikiniprep.com XSS vulnerability

Open Bug Bounty ID: OBB-452958 Description| Value ---|--- Affected Website:| nextlevelbikiniprep.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

MGASA-2017-0444 Updated tor packages fix security vulnerability

When checking for replays in the INTRODUCE1 cell data for a legacy onion service, Tor didn't correctly detect replays in the RSA- encrypted part of the cell. It was previously checking for replays on the entire cell, but those can be circumvented due to the malleability of Tor's legacy hybrid...

immobilier.co.il XSS vulnerability

Open Bug Bounty ID: OBB-448801 Description| Value ---|--- Affected Website:| immobilier.co.il Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

OPENSUSE-SU-2017:3201-1 Security update for tor

This update for tor fixes vulnerabilities that allowed some traffic confirmation, DoS and other attacks bsc1070849: - CVE-2017-8819: Replay-cache ineffective for v2 onion services - CVE-2017-8820: Remote DoS attack against directory authorities - CVE-2017-8821: An attacker can make Tor ask for a...

OPENSUSE-SU-2017:3203-1 Security update for tor

This update for tor fixes vulnerabilities that allowed some traffic confirmation, DoS and other attacks bsc1070849: - CVE-2017-8819: Replay-cache ineffective for v2 onion services - CVE-2017-8820: Remote DoS attack against directory authorities - CVE-2017-8821: An attacker can make Tor ask for a...

Threat Outbreak Alert RuleID31440: Email Messages Distributing Malicious Software on November 24, 2017

Medium Alert ID: 56046 First Published: 2017 November 27 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31440 may contain the following files: Name |...

TeleShadow v2 - Advanced Telegram Desktop Session Hijacker!

Advanced Telegram Desktop Session Hijacker! Stealing desktop telegrams has never been so easy ! Set the email and sender details of the sender and recipient and send it to the victim after compiling. How do I use the session file? Delete everything inside folder at...

Threat Outbreak Alert RuleID31285: Email Messages Distributing Malicious Software on November 14, 2017

Medium Alert ID: 55910 First Published: 2017 November 14 14:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31285 may contain the following files: Name |...

Threat Outbreak Alert RuleID31217: Email Messages Distributing Malicious Software on November 7, 2017

Medium Alert ID: 55794 First Published: 2017 November 7 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31217 may contain the following files: Name |...

Infogram: No Confirmation or Notification During Email Change which can leads to account takeover

Hi Team, I have noticed that, when user change his email through account setting, user doesn't get any notification or confirmation to change an email from xxxx to yyyyy. If user kept his/her account logged-in into PC, cafe, college systems then attacker can change his/her email to own mail and c...

Boozt Fashion AB: No Confirmation During Email Change

Hello Team, Your system is letting to change email address without confirmation. User can change the password without any confirmation. Anyone can access or make change to any account if that account is logged in public computer. So, it is better to send email to user email and confirm the change...

tankonyvek.tudomanytortenet.hu XSS vulnerability

Vulnerable URL: http://tankonyvek.tudomanytortenet.hu/orvostortenetikonyvtar///index.php?menutabla=3=4id=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

3CX Phone System 15.5.3554.1 Directory Traversal

Title: ====== 3CX Phone System - Authenticated Directory Traversal Author: ======= Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG CVE-ID: ======= CVE-2017-15359 Risk Information: ================= CVSS Base Score: 6.8 CVSS Vector: CVSS3AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N Timeline:...

3CX Phone System 15.5.3554.1 - Directory Traversal

3CX Phone System 15.5.3554.1 - Directory Traversal Title: ====== 3CX Phone System - Authenticated Directory Traversal Author: ======= Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG CVE-ID: ======= CVE-2017-15359 Risk Information: ================= CVSS Base Score: 6.8 CVSS Vector:...

3CX Phone System 15.5.3554.1 - Directory Traversal

Title: ====== 3CX Phone System - Authenticated Directory Traversal Author: ======= Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG CVE-ID: ======= CVE-2017-15359 Risk Information: ================= CVSS Base Score: 6.8 CVSS Vector: CVSS3AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N Timeline:...

Threat Outbreak Alert RuleID30911: Email Messages Distributing Malicious Software on October 11, 2017

Medium Alert ID: 55585 First Published: 2017 October 11 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30911 may contain the following files: Name |...