Oracle Database Server Multiple Unspecified Vulnerabilities -07 (Jan 2016)

Oracle Database Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Threat Outbreak Alert RuleID20606: Email Messages Distributing Malicious Software on January 21, 2016

Medium Alert ID: 43139 First Published: 2016 January 21 19:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20606 may contain the following files: Name |...

www295.americanexpress.com XSS vulnerability

Vulnerable URL: https://www295.americanexpress.com/cards/leavingblank.jsp?url=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 21.01.2016 Latest check for patch:| 21.01.2016 13:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

www295.americanexpress.com Open Redirect vulnerability

Vulnerable URL: https://www295.americanexpress.com/cards/leavingblank.jsp?url=http://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 09.06.2017 Latest check for patch:| 09.06.2017 07:19 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...

Shopify: [CSRF] Activate PayPal Express Checkout

Hi , i have found a CSRF issue when activating PayPal Express checkout. Steps to reproduce: 1. Create a new store then login with the admin account. 2. Go to https://.myshopify.com/admin/settings/payments and you'll see that PayPal Express checkout is already active , so click the edit button and...

Threat Outbreak Alert RuleID18985: Email Messages Distributing Malicious Software on October 27, 2015

Medium Alert ID: 41742 First Published: 2015 October 27 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18985 may contain the following files: Name |...

Threat Outbreak Alert RuleID18932: Email Messages Distributing Malicious Software on October 25, 2015

Medium Alert ID: 41700 First Published: 2015 October 26 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18932 may contain the following files: Name |...

No Charset in Content-Type Header

Overview Vulnerable versions of express do not specify a charset field in the content-type header while displaying 400 level response messages. The lack of enforcing user's browser to set correct charset, could be leveraged by an attacker to perform a cross-site scripting attack, using non-standa...

macclesfield-express.co.uk XSS vulnerability

Vulnerable URL: http://www.macclesfield-express.co.uk/whats-on/manchester/%22%3E%3Csvg-onload%3Dprompt%28-XSSPOSED-%29%3E/anytime/?query=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:44...

Threat Outbreak Alert RuleID18181: Email Messages Distributing Malicious Software on September 23, 2015

Medium Alert ID: 41156 First Published: 2015 September 23 12:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18181 may contain the following files: Name ...

Design/Logic Flaw

The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call...

PT-2015-7407

Name of the Vulnerable Software and Affected Versions VBox Communications Satellite Express Protocol version 2.3.17.3 Description The issue allows local users to gain privileges by writing to arbitrary physical memory locations. This is achieved via a specific ioctl call, 0x00000ffd...

CVE-2015-6923: Undefined Security Weakness

The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call...

VBox Satellite Express Arbitrary Write Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2015-005 : VBox Satellite Express Arbitrary Write Privilege Escalation Title: VBox Satellite Express Arbitrary Write Privilege Escalation Advisory ID: KL-001-2015-005 Publication Date: 2015.09.16 Publication URL:...

VBox Satellite Express 2.3.17.3 - Arbitrary Write Vulnerability

A vulnerability within the ndvbs module allows an attacker to inject memory they control into an arbitrary location they define. This vulnerability can be used to overwrite function pointers in HalDispatchTable resulting in an elevation of privilege. suffers from code execution, and local file...

Satellite Express Protocol Elevation of Privilege Vulnerability

Satellite Express Protocol is a satellite expression protocol. An elevation of privilege vulnerability exists in Satellite Express Protocol. An attacker could exploit this vulnerability to gain privileges...

VBox Satellite Express 2.3.17.3 - Arbitrary Write

VBox Satellite Express 2.3.17.3 - Arbitrary Write KL-001-2015-005 : VBox Satellite Express Arbitrary Write Privilege Escalation Title: VBox Satellite Express Arbitrary Write Privilege Escalation Advisory ID: KL-001-2015-005 Publication Date: 2015.09.16 Publication URL:...

VBox Satellite Express 2.3.17.3 - Arbitrary Write

KL-001-2015-005 : VBox Satellite Express Arbitrary Write Privilege Escalation Title: VBox Satellite Express Arbitrary Write Privilege Escalation Advisory ID: KL-001-2015-005 Publication Date: 2015.09.16 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2015-005.txt 1...

VBox Satellite Express Arbitrary Write Privilege Escalation

Vulnerability Details Affected Vendor: VBox Communications Affected Product: Satellite Express Protocol Affected Version: 2.3.17.3 Platform: Microsoft Windows XP SP3, Microsoft Windows 7 x86 CWE Classification: CWE-123: Write-what-where condition Impact: Arbitrary Code Execution Attack vector:...

express.com XSS vulnerability

Vulnerable URL: http://www.express.com/browse/search.jsp?q="-confirm/XSSPOSED/-" Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5263 Google Pagerank| 5 VI...