mamnewsa.pl XSS vulnerability

Open Bug Bounty ID: OBB-452095 Description| Value ---|--- Affected Website:| mamnewsa.pl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

astleyststephen.org.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-451829 Description| Value ---|--- Affected Website:| astleyststephen.org.uk Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

CVE-2017-17613

creationtimestamp| type| source ---|---|--- 2017-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43283...

CVE-2017-17873

creationtimestamp| type| source ---|---|--- 2017-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43316...

CVE-2017-17621

creationtimestamp| type| source ---|---|--- 2017-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43290...

CVE-2017-17641

creationtimestamp| type| source ---|---|--- 2017-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43312...

CVE-2017-17615

creationtimestamp| type| source ---|---|--- 2017-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43280...

CVE-2017-17618

creationtimestamp| type| source ---|---|--- 2017-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43286...

CVE-2017-17625

creationtimestamp| type| source ---|---|--- 2017-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43294...

CVE-2017-17626

creationtimestamp| type| source ---|---|--- 2017-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43295...

countryholidaysinnsuites.com XSS vulnerability

Open Bug Bounty ID: OBB-451379 Description| Value ---|--- Affected Website:| countryholidaysinnsuites.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-17600

creationtimestamp| type| source ---|---|--- 2017-12-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43266...

CVE-2017-17599

creationtimestamp| type| source ---|---|--- 2017-12-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43264...

CVE-2017-17574

creationtimestamp| type| source ---|---|--- 2017-12-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43258...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of December 4, 2017

It snowed in Austin, Texas last night. It’s not a big deal for those of you who live in areas where you’re used to snow, but for those of us who are native Texans, it’s a big deal. Funny enough, I had scheduled a maintenance appointment for later today to make sure our heater is in working order...

CVE-2017-17584

creationtimestamp| type| source ---|---|--- 2017-12-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43246...

CVE-2017-17591

creationtimestamp| type| source ---|---|--- 2017-12-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43239...

node.js -- Data Confidentiality/Integrity Vulnerability, December 2017

Node.js reports: Data Confidentiality/Integrity Vulnerability - CVE-2017-15896 Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSLread due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the...

CVE-2017-17589

creationtimestamp| type| source ---|---|--- 2017-12-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43240...

CVE-2017-17594

creationtimestamp| type| source ---|---|--- 2017-12-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43235...