PT-2018-3912 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 EU version 1.01 Description: An issue in the Diagnostics component of the D-Link DSL-3782 EU device allows an authenticated user to cause memory corruption by passing a long buffer as an 'unset' parameter to the...

CVE-2018-8941

Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set DiagnosticsEntry' function in an HTTP request, related to /userfs/bin/tcapi...

CVE-2018-8941: Improper Restriction of Operations within the Bounds of a Memory Buffer

Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set DiagnosticsEntry' function in an HTTP request, related to /userfs/bin/tcapi...

CVE-2018-8769

An out-of-bound read flaw has been found in elfutils in the ebldynamictagname function of ebldynamictagname.c file. An attacker could exploit this by supplying a crafted ELF file to display wrong data or potentially cause a crash in eu-readelf and eu-elflint binaries...

Mapping the Journey to GDPR Compliance: Who’s got the wheel?

With so many different areas of the company involved in our journey to becoming compliant with the General Data Protection Regulation GDPR by May 25th, it was essential for us to have a strong program manager mapping our route. The GDPR enforces the idea that every company should to be aware of...

ec.europa.eu XSS vulnerability

Open Bug Bounty ID: OBB-583413 Description| Value ---|--- Affected Website:| ec.europa.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Data Security Solutions for GDPR Compliance

Enforcement of the new EU General Data Protection Regulation GDPR adopted in 2016 starts on May 25, 2018. It requires all organizations that do any business in the EU or that collect or process personal data originating in the EU to comply with the regulation. Organizations that do not have a...

Webcast Q&A: The GDPR Deadline Readiness and Impact to Global Organizations Outside the EU

With the EU’s General Data Protection Regulation GDPR going into effect in late May, organizations are hungry for clarifying information regarding its vaguely-worded requirements, in particular as they apply to cyber security and IT compliance. This interest in better understanding how to comply...

Our Journey to GDPR Compliance: Lessons learned on our way to May 25th

With the European Union’s EU General Data Protection Regulation GDPR date fast approaching, we have been working hard to make sure our already strong security culture and policies will align with the new regulation. As GDPR is a very broad law that includes people, process, and technology, workin...

walker-eu.com XSS vulnerability

Open Bug Bounty ID: OBB-576369 Description| Value ---|--- Affected Website:| walker-eu.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GDPR: The Stakes Are High and Time Is of the Essence

With the General Data Protection Regulation GDPR going into effect in under three months, the countdown clock is fast approaching zero for organizations worldwide that handle personal data of EU residents. GDPR is a very broad and wide-ranging regulation that requires organizations to obtain a lo...

Joomla! Component JomEstate PRO 3.7 - id SQL Injection

Joomla! Component JomEstate PRO 3.7 - id SQL Injection Exploit Title: Joomla! Component JomEstate PRO = 3.7 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://comdev.eu/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/jomestate-pro/...

Joomla! Component JomEstate PRO 3.7 - 'id' SQL Injection

Exploit Title: Joomla! Component JomEstate PRO = 3.7 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://comdev.eu/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/jomestate-pro/ Version: = 3.7 Category: Webapps Tested on:...

africa-eu-sti-portal.net XSS vulnerability

Open Bug Bounty ID: OBB-558537 Description| Value ---|--- Affected Website:| africa-eu-sti-portal.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

africa-eu-sti-portal.net XSS vulnerability

Open Bug Bounty ID: OBB-557392 Description| Value ---|--- Affected Website:| africa-eu-sti-portal.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ec.europa.eu XSS vulnerability

Open Bug Bounty ID: OBB-556324 Description| Value ---|--- Affected Website:| ec.europa.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Countdown to GDPR: For GDPR Compliance, Web App Security Is a Must

With web and mobile apps becoming a preferred vector for data breaches, organizations must include application security in their plans for complying with the EU's General Data Protection Regulation GDPR. First discussed in the 1990s and turned into law in 2016, GDPR goes into effect in May of thi...

GDPR and Breach Detection: How to Ask the Right Questions to Meet the GDPR Breach Notification Rule

It is now less than four months before the General Data Protection Regulation GDPR becomes effective. This new data regulation of the European Union is designed to provide individuals with rights and protections over their personal data collected by business around the world. It aims to unify dat...

eu-energystar.org XSS vulnerability

Open Bug Bounty ID: OBB-537492 Description| Value ---|--- Affected Website:| eu-energystar.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

streams.h82.eu XSS vulnerability

Open Bug Bounty ID: OBB-531126 Description| Value ---|--- Affected Website:| streams.h82.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...