Threat Outbreak Alert RuleID19570: Email Messages Distributing Malicious Software on November 21, 2015

Medium Alert ID: 42224 First Published: 2015 November 23 14:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19570 may contain the following files: Name |...

Threat Outbreak Alert RuleID19571: Email Messages Distributing Malicious Software on November 21, 2015

Medium Alert ID: 42223 First Published: 2015 November 23 14:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19571 and RuleID19571KVR may contain the...

berkleyinaus.com.au XSS vulnerability

Vulnerable URL: http://www.berkleyinaus.com.au/search?q=%22%2F%3E%3CscRiPT%3Ealert%28%22XSSPOSED%22%29%3B%3C%2FscriPT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3413920 Goog...

musictag.co.uk XSS vulnerability

Vulnerable URL: http://www.musictag.co.uk/tagcheck.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status:| No Check...

pawnyoursextape.net XSS vulnerability

Vulnerable URL: http://www.pawnyoursextape.net/amateur-videos/t02/index.php?nats=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 250958...

Threat Outbreak Alert RuleID19309: Email Messages Distributing Malicious Software on November 10, 2015

Medium Alert ID: 42027 First Published: 2015 November 10 23:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19309 may contain the following files: Name |...

youth.gov.hk XSS vulnerability

Vulnerable URL: http://www.youth.gov.hk/en/career-and-study/search.htm?keywords=%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E?keywords=%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E=11 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check...

butik.kattstallet.se XSS vulnerability

Vulnerable URL: http://butik.kattstallet.se/sokresultat?searchwords="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website...

Threat Outbreak Alert RuleID19082: Email Messages Distributing Malicious Software on October 30, 2015

Medium Alert ID: 41876 First Published: 2015 November 2 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19082 and RuleID19082KVR may contain the...

Apple OS X Script Editor Restriction Bypass Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in Script Editor in Apple OS X versions prior to 10.11.1. A remote attacker could...

Serendipity 2.0.2 Cross Site Scripting

Date: 28/10/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Stored XSS Tested on: Windows 8.1 Product: Serendipity Version: 2.0.2 Description: Application is vulnerable to Stored XSS attack. There is a XSS issue in version 2.0.2. and the vulnerable parameters are "Blog name" and...

meteorama.fr XSS vulnerability

Vulnerable URL: http://www.meteorama.fr/s?l=%22/%3E%3Csvg/onload=alert%28%22XSSPOSED%22%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 62505 Google Pagerank| 5 VIP website...

CVE-2015-7007

Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors...

Design/Logic Flaw

Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors...

CVE-2015-7007

CVE-2015-7007 affects Apple OS X Script Editor prior to 10.11.1. The vulnerability allows remote attackers to bypass the intended user confirmation for AppleScript execution via unspecified vectors, enabling arbitrary AppleScript execution without user approval. Impact, per sources, is partial co...

electrolux.com.co XSS vulnerability

Vulnerable URL: http://www.electrolux.com.co/Global-pages/Search-Result-page1/?query=%27|alert%28%27XSSPOSED%27%29|%27 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

br.blouinartinfo.com XSS vulnerability

Vulnerable URL: http://br.blouinartinfo.com/blouinsearch?query=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=1 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

clubphilateliquemaconnais.com XSS vulnerability

Vulnerable URL: http://www.clubphilateliquemaconnais.com/search/site/?q=%3C/title%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:45 GMT Vulnerability type:| XSS Vulnerability status:|...

CVE-2015-5780

The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors...

Design/Logic Flaw

The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors...