veriteclinic.jp XSS vulnerability

Vulnerable URL: http://www.veriteclinic.jp/academic/2015/build/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1518512 VIP...

talentia.chiesi.uk.com XSS vulnerability

Vulnerable URL: https://talentia.chiesi.uk.com/hcmcv/CFLogon/CFResetPassword.asp?Username=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Threat Outbreak Alert RuleID22617: Email Messages Distributing Malicious Software on May 2, 2016

Medium Alert ID: 44973 First Published: 2016 May 2 18:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22617 may contain the following files: Name | Size ...

virtuafighter.com XSS vulnerability

Vulnerable URL: http://virtuafighter.com/streams/multi?type=1&pos1;=1.v.%3Ciframe%20src=%22%22%3E%3C/iframe%3E%3Ciframe%20src=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3E%3C/iframe%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS...

directcompare.com XSS vulnerability

Vulnerable URL: http://www.directcompare.com/getplace.php?country=%3C/title%3E%3C/script/%27-alert%280%29-%27%22-%22--%3E%3Cimg/onerror=%22;alert%28/OPENBUGBOUNTY/%29;%22src=1%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS...

Threat Outbreak Alert RuleID22038: Email Messages Distributing Malicious Software on April 1, 2016

Medium Alert ID: 44417 First Published: 2016 April 1 16:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22038 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID21982: Email Messages Distributing Malicious Software on June 23, 2016

Medium Alert ID: 44362 First Published: 2016 March 30 17:08 GMT Last Updated: 2016 June 24 13:46 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21982 and...

Coinbase: Sending payments via QR code does not require confirmation

Coinbase pushed out a feature whereby scanning a QR code inside the Coinbase Mobile app would complete payments under 0.1BTC without further confirmation. Upon reviewing this report and further consideration of the possible security implications of this feature, it was reverted. This issue has a...

Threat Outbreak Alert RuleID21922: Email Messages Distributing Malicious Software on March 25, 2016

Medium Alert ID: 44308 First Published: 2016 March 25 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21922 may contain the following files: Name | Si...

yourmtvtop20.mtv.co.uk XSS vulnerability

Vulnerable URL: http://www.yourmtvtop20.mtv.co.uk/?chartid=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

CVE-2016-1770

The CVE-2016-1770 issue affects the Reminders component in OS X El Capitan prior to 10.11.4. Root cause: a tel: URL triggering a dialing action without user confirmation due to insufficient entitlement checks. Impact: ability to trigger a call without prompting the user. Mitigation: Apple release...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

See how I withdraw your QQ message, not fix-bug warning-the black bar safety net

0x01 Specific ideas: In with the PC end of windows chat, First you need to put the QQ chat friends window using colorful bubbles off, Then you send each other a message,right click your message, There will be a withdraw option,don't worry. point, Waiting for the other to send a message to come ov...

Threat Outbreak Alert RuleID21778: Email Messages Distributing Malicious Software on March 17, 2016

Medium Alert ID: 44180 First Published: 2016 March 18 18:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21778 may contain the following files: Name | Si...

New Relic: no email confirmation on signup

the email confirmation is not taken anyone can make newrelic account from any email address...

wondershare.de XSS vulnerability

Vulnerable URL: http://wondershare.de/servers/public/index.php?c=product= Details: Description| Value ---|--- Patched:| Yes, at 16.08.2016 Latest check for patch:| 16.08.2016 10:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 61169 Google Pagerank| 4 VIP...

Threat Outbreak Alert RuleID21459: Email Messages Distributing Malicious Software on March 10, 2016

Medium Alert ID: 44049 First Published: 2016 March 10 22:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21459KVR may contain the following files: Name |...

New Relic: CSRF - Regenerate all admin api keys

Hi The request to regenerate all admin api keys is a GET request without CSRF protection. As such, you can regenerate someone's keys using csrf. While not too big of an issue the admin can always see the keys and use them its certainly annoying and can cause business disruption. Additionally, a...