nhgc.biz XSS vulnerability

Open Bug Bounty ID: OBB-455382 Description| Value ---|--- Affected Website:| nhgc.biz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

gcloud.ktpae.gr XSS vulnerability

Open Bug Bounty ID: OBB-454411 Description| Value ---|--- Affected Website:| gcloud.ktpae.gr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

lit.jinr.ru XSS vulnerability

Open Bug Bounty ID: OBB-454320 Description| Value ---|--- Affected Website:| lit.jinr.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

sos-lekaren.sk XSS vulnerability

Open Bug Bounty ID: OBB-454152 Description| Value ---|--- Affected Website:| sos-lekaren.sk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

thewatershed.com XSS vulnerability

Open Bug Bounty ID: OBB-453889 Description| Value ---|--- Affected Website:| thewatershed.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Multiple OEM - nsd Remote Stack Format String (PoC)

Multiple OEM - nsd Remote Stack Format String PoC STX Subject: Remote Stack Format String in 'nsd' binary from multiple OEM Attack vector: Remote Authentication: Anonymous no credentials needed Researcher: bashis December 2017 PoC: https://github.com/mcw0/PoC Release date: December 14, 2017 Full...

CVE-2017-17651

creationtimestamp| type| source ---|---|--- 2017-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43334...

Multiple OEM - 'nsd' Remote Stack Format String (PoC)

STX Subject: Remote Stack Format String in 'nsd' binary from multiple OEM Attack vector: Remote Authentication: Anonymous no credentials needed Researcher: bashis December 2017 PoC: https://github.com/mcw0/PoC Release date: December 14, 2017 Full Disclosure: 0-Day - PoC - 1 $ curl...

stuht.de XSS vulnerability

Vulnerable URL: https://www.stuht.de/index.php?Schneid-+%26+Windeisenhalter=products=1258=1=0=open&nodeId-1;=1002&parentProductGroupNo-1;=1258&level-1;=4&catId-1;===1%22%3E%3Csvg/onload=alert%27X-S-S%27%3E Details: Description| Value ---|--- Patched:| Yes, at 19.12.2017 Latest check for patch:|...

CVE-2017-17872

creationtimestamp| type| source ---|---|--- 2017-12-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43330...

CVE-2017-1000408

creationtimestamp| type| source ---|---|--- 2017-12-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43331...

CVE-2017-17871

creationtimestamp| type| source ---|---|--- 2017-12-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43329...

Patch Tuesday, December 2017 Edition

The final Patch Tuesday of the year is upon us, with Adobe and Microsoft each issuing security updates for their software once again. Redmond fixed problems with various flavors of Windows, Microsoft Edge, Office, Exchange and its Malware Protection Engine. And of course Adobe's got another...

December 2017 security update release

Today, we released security updates to provide additional protections against malicious attackers. By default, Windows 10 receives these updates automatically, and for customers running previous versions, we recommend they turn on automatic updates as a best practice. More information about this...

updatestar.com XSS vulnerability

Open Bug Bounty ID: OBB-452511 Description| Value ---|--- Affected Website:| updatestar.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

salatik.com.ua XSS vulnerability

Open Bug Bounty ID: OBB-452431 Description| Value ---|--- Affected Website:| salatik.com.ua Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

druha.svetova.cz XSS vulnerability

Open Bug Bounty ID: OBB-452412 Description| Value ---|--- Affected Website:| druha.svetova.cz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Security Updates for Microsoft Word Products (December 2017)

The Microsoft Word Products are missing security updates. Microsoft has released an update for Microsoft Office that provides enhanced security as a defense-in-depth measure. The update disables the Dynamic Update Exchange protocol DDE in all supported editions of Microsoft Word. More information...

CVE-2017-13875

creationtimestamp| type| source ---|---|--- 2017-12-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43327...

KB4053577: Security update for Adobe Flash Player (December 2017)

The remote Windows host is missing security update KB4053577. It is, therefore, affected by a vulnerability which may allow an attacker to reset the global settings preference file. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105178; scriptversion"1.12";...