CVE-2015-4989

CVE-2015-4989 is an information-disclosure vulnerability in IBM Tealeaf Customer Experience portals. The IBM advisory and related IBM Tealeaf bulletins confirm that the issue affects IBM Tealeaf CX products from versions 8.0 through 9.0.2 (including 9.0.2A and earlier 9.x releases) and allows an ...

a2zmobility.ca XSS vulnerability

Vulnerable URL: https://www.a2zmobility.ca/comersus/store/comersuscustomerAuthenticateForm.asp?redirectUrl=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

uniformpros.ca XSS vulnerability

Vulnerable URL: https://www.uniformpros.ca/comersus/store/comersuscustomerAuthenticateForm.asp?redirectUrl=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

nordicbet.com XSS vulnerability

Vulnerable URL: https://www.nordicbet.com/en/customer-service/faq Details: Description| Value ---|--- Patched:| Yes, at 09.06.2016 Latest check for patch:| 09.06.2016 14:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25659 Google Pagerank| 5 VIP website...

Hyatt Hotel Says Payment Systems Hacked with Credit-Card Stealing Malware

Hyatt Hotels Corporation is notifying its customers that credit card numbers and other sensitive information may have been stolen after it found malware on the computers that process customer payments. "We recently identified malware on computers that operate the payment processing systems for...

WordPress Quotes And Tips 1.19 Cross Site Scripting

Plugin Name : Quotes and Tips Effected Version : 1.19 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following fields put the payload a...

The vulnerability of Oracle Siebel CRM’s system for managing customer relationships allows attackers to compromise the confidentiality of information.

The vulnerability of the Siebel Core component – the Server OM Svcs part of the Oracle Siebel CRM system’s customer relationship management system – is related to code errors. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of sensitive information...

The vulnerability of the Oracle Siebel CRM system’s customer relationship management system allows attackers to compromise the confidentiality of customer information.

The vulnerability of the Siebel Core component – the Server OM Svcs part of the Oracle Siebel CRM system’s customer relationship management system – is related to code errors. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of sensitive information...

13 Million MacKeeper Users Hacked — 21 GB of Data Exposed

MacKeeper anti-virus company is making headlines today for its lax security that exposed the database of 13 Million Mac users' records including names, email addresses, usernames, password hashes, IP addresses, phone numbers, and system information. MacKeeper is a suite of software that claims to...

Cisco Hosted Collaboration Mediation Fulfillment SOAP API Sensitive Information Disclosure Vulnerability

A vulnerability in the Simple Object Access Protocol SOAP application programming interface API of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an authenticated, remote attacker to obtain sensitive information that should be restricted. The attacker must authentica...

Critical: Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.1.0 commons-collections security update

An update for the Apache Commons Collections component that fixes one security issue is now available from the Red Hat Customer Portal for Red Hat JBoss BPM Suite 6.1.0. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS...

uswitch.com XSS vulnerability

Vulnerable URL: http://www.uswitch.com/gas-electricity/customer Details: Description| Value ---|--- Patched:| Yes, at 06.01.2017 Latest check for patch:| 06.01.2017 09:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9744 Google Pagerank| 6 VIP website status:...

Critical: Red Hat Security Advisory: Red Hat JBoss Operations Network 3.2.3 security update

An update for Red Hat JBoss Operations Network 3.2.3 that fixes one security issue in the Apache commons-collections library is now available. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

CentOS 7 : glibc (CESA-2015:2199)

Updated glibc packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Critical: Red Hat Security Advisory: Red Hat JBoss Portal 6.2.0 commons-collections security update

An updated package for the apache commons-collections library, fixing one security issue, is now available for Red Hat JBoss Portal 6.2.0 from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS...

alvdesign.se XSS vulnerability

Vulnerable URL: http://www.alvdesign.se/customer?redirect="';-- Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0...

Critical: Red Hat Security Advisory: Red Hat Fuse Service Works 6.0.0 commons-collections security update

An update for the Apache Commons Collections component that fixes one security issue is now available from the Red Hat Customer Portal for Red Hat Fuse Service Works 6.0.0. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVS...

United Airlines Slow to Patch Mobile App Vulnerability

A vulnerability reported to United Airlines that could have been exploited to manipulate flight reservations and customer data sat unpatched for almost six months before it was fixed 10 days ago. Researcher Randy Westergren found and reported an issue in United’s mobile app in May, shortly after...

54 Starwood Hotels Hit By Point of Sale Malware

Travelers who stayed at either a Westin, Sheraton, or W hotel over the last year or so are going to want to check their bank statements sooner rather than later. Starwood Hotels and Resorts, a company that owns and operates approximately 1,200 hotels across North America, including the...

Moderate: Red Hat Security Advisory: glibc security, bug fix, and enhancement update

Updated glibc packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...