Buffer Overflow Vulnerability in Multiple IBM DB2 Products

IBM DB2 Express Edition and so on are the products of the United States IBM Corporation. IBM DB2 Express Edition is a set of database server software; DB2 Connect Application Server Edition is a set of mainframe database system. A buffer overflow vulnerability exists in multiple IBM DB2 products....

chronicle-express.com XSS vulnerability

Open Bug Bounty ID: OBB-251084 Description| Value ---|--- Affected Website:| chronicle-express.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

paris-express.com XSS vulnerability

Open Bug Bounty ID: OBB-250995 Description| Value ---|--- Affected Website:| paris-express.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Rapid7 Metasploit Editions Cross-Site Scripting Vulnerability

Rapid7 Metasploit is an open source security vulnerability detection tool from Rapid7, Inc. Metasploit Express, Community and Pro are different versions. A cross-site request forgery vulnerability exists in Rapid7 Metasploit Express, Community, and Pro, which stems from the program failing to...

Cisco Unified Contact Center Express Clear Text Authentication Vulnerability

A vulnerability in the Extensible Messaging and Presence Protocol XMPP service of Cisco Unified Contact Center Express UCCx could allow an unauthenticated, remote attacker to masquerade as a legitimate user. The vulnerability is due to the XMPP service incorrectly processing an unsecured HTTP por...

bookstore.linnbenton.edu XSS vulnerability

Vulnerable URL: http://www.bookstore.linnbenton.edu/lbenton/textbookexpress/gettxtexpress.asp?remote=1=2023==SPRING%20ALBANY%202017=WR=121=1/-///'/"//--...

archive.indianexpress.com XSS vulnerability

Vulnerable URL: http://archive.indianexpress.com/gsearch.php?q=CAT%20UPSC%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.08.2017 Vulnerability type:| XSS Vulnerability status:|...

Teradata Gateway and TD Express Security Vulnerabilities

Teradata Gateway and TD Express are both products of Teradata Corporation. The former is a gateway product and the latter is a free database software. A security vulnerability exists in Teradata Gateway and TD Express. A remote attacker could exploit this vulnerability to cause a denial of servic...

Threat Outbreak Alert RuleID29266: Email Messages Distributing Malicious Software on May 24, 2017

Medium Alert ID: 53953 First Published: 2017 May 24 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29266 may contain the following files: Name | Size...

CVE-2015-5401

Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08Sles10 and 15.00.02.08Sles11 allow remote attackers to cause a denial of service database crash via a malformed CONFIG REQUEST message...

CVE-2015-5401

CVE-2015-5401 affects Teradata Gateway and TD Express. A remote attacker can cause a denial of service (database crash) by sending a malformed CONFIG REQUEST message. Affected versions: Teradata Gateway prior to 15.00.03.02-1 and 15.10.x prior to 15.10.00.01-1; TD Express prior to 15.00.02.08_Sle...

Concrete CMS: Stored XSS in Headline TextControl element in Express forms [ concrete5 8.1.0 ]

Intro Luke, I am your Crayons! Type of issue: Core CMS issue Level of severity: Internal Attack Vector Concrete5 version: 8.1.0 Summary There is Stored XSS vulnerability in Headline element of TextControl Express element. This vulnerability allows malicious user to embed JavaScript code and execu...

Ubiquiti Inc.: Directory traversal at https://nightly.ubnt.com

From within the http request function of the Acunetix and IronWasp programs I was able to view the passwd and hosts files at https://nightly.ubnt.com. Please see the attached screenshots for proof. I have tried to reproduce from within firefox and internet explorer without much luck however if yo...

leinsterexpress.ie XSS vulnerability

Vulnerable URL: http://www.leinsterexpress.ie/archivio.jsp?idsezione=282=datapubblicazione,false"-confirmOPENBUGBOUNTY-"=1=year==Offaly%20Sport Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

online.americanexpress.com XSS vulnerability

Vulnerable URL: https://online.americanexpress.com/myca/logon/us/action/LogLogoffHandler?requesttype=LogLogoffHandler=enUS=iNavLogOutButton=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 29.05.2017 Latest check for patch:| 29.05.2017 12:15 GMT...

jobs.americanexpress.com XSS vulnerability

Vulnerable URL: https://jobs.americanexpress.com/apply/17005969'-confirm'OPENBUGBOUNTY'-'/login/ Details: Description| Value ---|--- Patched:| Yes, at 29.05.2017 Latest check for patch:| 29.05.2017 12:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

online.americanexpress.com XSS vulnerability

Vulnerable URL: https://online.americanexpress.com/myca/logon/us/action/LogLogoffHandler?requesttype=LogLogoffHandler=enUS=iNavLogOutButton=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 29.05.2017 Latest check for patch:| 29.05.2017 12:14 GMT...

Cisco CallManager Express Unauthorized Access Vulnerability (cisco-sa-20170503-cme1)

A vulnerability in Cisco IOS Software for Cisco CallManager Express CME could allow an unauthenticated, remote attacker to make unauthorized phone calls. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Threat Outbreak Alert RuleID29017: Email Messages Distributing Malicious Software on May 8, 2017

Medium Alert ID: 53755 First Published: 2017 May 8 19:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29017 may contain the following files: Name | Size ...

Cisco IOS Software Unauthorized Access Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in Cisco IOS 15.53M Software in Cisco CallManager Express CME devices that stems from a configuration restriction in the toll-fraud protections...