CVE-2019-12113

ONAP SDNC (pre-Dublin) is affected by a command-injection vulnerability in sla/printAsGv triggered by a crafted module parameter. An authenticated user can execute arbitrary commands, impacting all SDC deployments that include admportal. The CVE-2019-12113 issue is documented with a high-severity...

Medtronic N'Vision Clinician Programmer (Update A)

1. EXECUTIVE SUMMARY --------- Begin Update A Part 1 of 5 -------- CVSS v3 6.3 --------- End Update A Part 1 of 5 ----------- ATTENTION: Low skill level to exploit Vendor: Medtronic Equipment: N’Vision Clinician Programmer --------- Begin Update A Part 2 of 5 ----------- Vulnerabilities:...

financedublin.com XSS vulnerability

Open Bug Bounty ID: OBB-607561 Description| Value ---|--- Affected Website:| financedublin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Eaton ELCSoft

CVSS v3 6.3 ATTENTION: Exploitable remotely/low skill level to exploit. Vendor: Eaton Equipment: ELCSoft Vulnerability: Improper Input Validation AFFECTED PRODUCTS ELCSoft is programming software for all Eaton ELC programmable logic controllers. The ELC programmable logic controllers are not...

dublinzoo.digitickets.co.uk Open Redirect vulnerability

Vulnerable URL: http://dublinzoo.digitickets.co.uk/affiliates/?aid=53F1CFE4=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

IRISSCON security conference comes to Dublin in November

It's that time of the year when IRISSCON—the biggest security conference in Ireland, in my humble opinion—springs into life with a great collection of talks and Capture the Flag events. Held on November 23 in Dublin, there will be a strong focus on working in Infosec this year, alongside some of...

flair.ie XSS vulnerability

Vulnerable URL: http://flair.ie/dp.php?c=stores=dublin-store--south-=37 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1657363 VIP website status:| No Check flair.ie SSL connection:| Grade: F Coordinated...

dublinsquarepub.com XSS vulnerability

Vulnerable URL: http://www.dublinsquarepub.com/news.php?id=-1%20UNION%20SELECT%201,0x3c7363726970743e616c65727428224f50454e425547424f554e545922293b3c2f7363726970743e,3,4,5,6%20from%20guestbook-- Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017...

inyourpocket.com XSS vulnerability

Vulnerable URL: https://www.inyourpocket.com/search?city=dublin=" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 61669 VIP website status:| No Check...

dublinhonda.com XSS vulnerability

Vulnerable URL: http://www.dublinhonda.com/used-vehicles/action=imajaxcall=getresults=%22%3E%3Cscript%3Ealert%28%2Fxssposed%2F%29%3C%2Fscript%3E=1allfilters=false&postid=5 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

financedublin.com XSS vulnerability

Vulnerable URL: http://www.financedublin.com/unsubscribe.php?eid=%22%3E%3Cimg%20src=%22x%22%20onerror=alert%28/openbugbounty/%29%3E.png Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

Dublin Bus - Corrupted files, Customized SSL, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Dublin Bus published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 17 Update: python-feedparser-5.1.2-2.fc17

Universal Feed Parser is a Python module for downloading and parsing syndicated feeds. It can handle RSS 0.90, Netscape RSS 0.91, Userland RSS 0.91, RSS 0.92, RSS 0.93, RSS 0.94, RSS 1.0, RSS 2.0, Atom 0.3, Atom 1.0, and CDF feeds. It also parses several popular extension modules, including Dubli...

14 Year Old Hacker Hired by Microsoft after doing phishing via Call of Duty Server !

14 Year Old Hacker Hired by Microsoft after doing phishing via Call of Duty Server ! These are the kinds of things dreams are made of, a 14 year old hacker on Call of Duty was just recruited by Microsoft. You heard me right, Microsoft. This is exactly what Sony should have done with George Hotz –...

Trinity College Dublin Reports Data breach !

Trinity College Dublin Reports Data breach ! A file containing the names of students and staff of Trinity College Dublin, along with their addresses, ID numbers and email addresses, was "inadvertently" made accessible on a local network, the college said. TCD said today it had reported the incide...

[SECURITY] Fedora 13 Update: python-feedparser-5.0.1-1.fc13

Universal Feed Parser is a Python module for downloading and parsing syndicated feeds. It can handle RSS 0.90, Netscape RSS 0.91, Userland RSS 0.91, RSS 0.92, RSS 0.93, RSS 0.94, RSS 1.0, RSS 2.0, Atom 0.3, Atom 1.0, and CDF feeds. It also parses several popular extension modules, including Dubli...

[SECURITY] Fedora 15 Update: python-feedparser-5.0.1-1.fc15

Universal Feed Parser is a Python module for downloading and parsing syndicated feeds. It can handle RSS 0.90, Netscape RSS 0.91, Userland RSS 0.91, RSS 0.92, RSS 0.93, RSS 0.94, RSS 1.0, RSS 2.0, Atom 0.3, Atom 1.0, and CDF feeds. It also parses several popular extension modules, including Dubli...

Design/Logic Flaw

Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML OOXML documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the 1 LastModifiedBy and 2 creator fields in docProps/core.xml in the OOXML...

CVE-2007-6329

Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML OOXML documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the 1 LastModifiedBy and 2 creator fields in docProps/core.xml in the OOXML...