EMC ESRS VE Information Disclosure Vulnerability

EMC ESRS VE is a set of EMC customer service and end-user EMC products and solutions to provide two-way remote connection between the remote service software. A security vulnerability exists in EMC ESRS VE version 3.18 and earlier. An attacker could exploit the vulnerability to compromise an...

Best Practical Solutions Request Tracker Information Disclosure Vulnerability

Best Practical Solutions Request Tracker RT is an enterprise-grade, open source issue tracking system from Best Practical Solutions in the United States. The system has Bug tracking , customer service , customized workflow and other features . A security vulnerability exists in Best Practical...

Threat Outbreak Alert RuleID29583: Email Messages Distributing Malicious Software on June 22, 2017

Medium Alert ID: 54285 First Published: 2017 June 22 18:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29583 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29583: Email Messages Distributing Malicious Software on June 21, 2017

Medium Alert ID: 54271 First Published: 2017 June 21 18:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29583 may contain the following files: Name | Siz...

Stored Cross-Site Scripting Vulnerability in Medical Attendant App

Apply for Medical Care is an online unified registration platform that provides online reservation and registration for domestic hospitals. There is a stored cross-site scripting vulnerability in the App, the vulnerability arises because the Contact Customer Service function module fails to...

Threat Outbreak Alert RuleID29245: Email Messages Distributing Malicious Software on May 24, 2017

Medium Alert ID: 53948 First Published: 2017 May 24 15:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29245 may contain the following files: Name | Size...

President’s Cybersecurity Executive Order

On May 11, 2017, President Trump released the Presidential Executive Order on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure. This E.O. -- while stand alone in focus --should be seen in the context of a greater move in the Executive Branch to elevate the awareness...

Threat Outbreak Alert RuleID29016: Email Messages Distributing Malicious Software on May 5, 2017

Medium Alert ID: 53723 First Published: 2017 May 5 14:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29016 may contain the following files: Name | Size ...

Vulnerability in userid parameter of online customer service page of China Telecom's Palm Business Hall app.

China Telecom Pocket Business Office is a cell phone terminal-based application software that provides users with recharge and payment, cost inquiries and other services. The userid parameter in the online customer service page of China Telecom's Pocket Business Office app has an overstepping...

Threat Outbreak Alert RuleID27288: Email Messages Distributing Malicious Software on January 19, 2017

Medium Alert ID: 52359 First Published: 2017 January 19 15:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27288 may contain the following files: Name |...

Unauthorized Access Vulnerability in Deephaven Jet Mixcall Customer Service System

Ltd. is a company that focuses on the research, development, manufacturing and sales of call centers and converged communication products. mixcall is one of the company's customer service systems. An unauthorized access vulnerability exists in the SZHJ Mixcall customer service system. Due to a la...

Bypassing Ebay XSS Protection to launch XSS by Nirmal Dahal

This is a small proof of concept regarding “Reflective Cross-Site Scripting R-XSS ” which I had found on Ebay. I am not an active participant in bug bounty programs, but one day I had finished all my office works so I was surfing on Facebook and received a message from my brother, Samir, asking f...

Live800 online customer service system /live800/sta/export/chatOpSta. jsp injection vulnerability

No description provided by source...

Acer Admits E-commerce Site Breached

Taiwanese electronics company Acer began sending letters to customers last week indicating that some of their sensitive financial information–credit card data included–may have been accessed over the last year or so. Customers’ names, addresses, card numbers, expiration dates, and three digit CVV...

live800客服系统任意文件下载漏洞

No description provided by source...

Threat Outbreak Alert RuleID20754: Email Messages Distributing Malicious Software on January 27, 2016

Medium Alert ID: 43240 First Published: 2016 January 27 19:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20754 may contain the following files: Name |...

53KF XSS打客服

简要描述： RT 详细说明： http://www22.53kf.com 在截图的时候截断 修改图片地址为XSS地址 即可打客服 漏洞证明：...

nordicbet.com XSS vulnerability

Vulnerable URL: https://www.nordicbet.com/en/customer-service/faq Details: Description| Value ---|--- Patched:| Yes, at 09.06.2016 Latest check for patch:| 09.06.2016 14:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25659 Google Pagerank| 5 VIP website...

Threat Outbreak Alert RuleID19233: Email Messages Distributing Malicious Software on November 16, 2015

Medium Alert ID: 42115 First Published: 2015 November 16 18:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19233 may contain the following files: Name |...

phpyun 任意用户密码修改两处 (秒破/demo测试)

简要描述： 好久没看过php了。。。。 如题咯。 详细说明： 来看到找回密码的地方。 app/controller/forgetpwd/index.class.php function sendaction $username=yuniconv"utf-8","gbk",$POST'username'; if!$this-CheckRegUser$username&&!$this-CheckRegEmail$username $res'msg'=yuniconv"gbk","utf-8","用户名不符合规范！"; $res'type'='8'; echo...