[SECURITY] Fedora 23 Update: drupal7-views-3.14-1.fc23

You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...

[SECURITY] Fedora 24 Update: drupal7-views-3.14-1.fc24

You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...

ownCloud: [forum.owncloud.org] IE, Edge XSS via Request-URI

PoC Internet Explorer, Edge: https://blackfan.ru/x?r=https://forum.owncloud.org//%252e%252e blackfan.ru/x?r - simple redirection script, that necessary for exploitation HTTP Response: html Information No route found for "GET //%2e%2e"...

forum.topway.org Open Redirect vulnerability

Vulnerable URL: http://forum.topway.org/sns/link.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Moodle 2.6.x < 2.6.2 Multiple Vulnerabilities

Binary data 9424.prm...

Moodle 2.5.x < 2.5.5 Multiple Vulnerabilities

Binary data 9423.prm...

dafont.com XSS vulnerability

Vulnerable URL: http://www.dafont.com/forum/search.php?cx=partner-pub-0335502560634205%3A6690093599=FORID%3A10=ISO-8859-1="...

discomixes.ru Open Redirect vulnerability

Vulnerable URL: http://discomixes.ru/forum/rd.php?http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1881464 VIP website status:| No Check...

forum.antergos.com XSS vulnerability

Vulnerable URL: https://forum.antergos.com/?lang=%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check forum.antergos.com S...

forum.71squared.com XSS vulnerability

Vulnerable URL: https://forum.71squared.com/reset?lang=%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

forum.playwildterra.com XSS vulnerability

Vulnerable URL: http://forum.playwildterra.com/reset?lang=%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

forum.windyty.com XSS vulnerability

Vulnerable URL: https://forum.windyty.com/reset?lang=%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16935 VIP...

forum.jandusoft.com XSS vulnerability

Open Bug Bounty ID: OBB-164975 Description| Value ---|--- Affected Website:| forum.jandusoft.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

MyLittleForum 2.3.5 Command Execution

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MYLITTLEFORUM-PHP-CMD-EXECUTION.txt + ISR: APPARITIONSEC Vendor: ================= mylittleforum.net Download: github.com/ilosuna/mylittleforum/releases/tag/v2.3.5 Product:...

My Little Forum 2.3.5 - PHP Command Injection

My Little Forum 2.3.5 - PHP Command Injection / + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MYLITTLEFORUM-PHP-CMD-EXECUTION.txt + ISR: APPARITIONSEC Vendor: ================= mylittleforum.net Download:...

Nuclear, Angler Exploit Kit Activity Has Disappeared

Criminal hackers are fickle about their attack vectors. You need to look no further for evidence of this than their constant migration from one exploit kit to another. And while there is an expansive menu of exploit kits, attackers do seem to congregate around a precious few. Researchers who stud...

Underground Market Selling Cheap Access to Hacked Servers

Criminals and advanced attackers for two years have had at their disposal an extensive trading platform selling access to hacked servers worldwide. For as little as $6 USD, attackers can purchase access to a compromised machine and launch attacks or get a one-time peek at all the data on a server...

uTorrent Forums User List Stolen

BitTorrent has warned users of its uTorrent client to change their passwords after a third-party breach allowed hackers to walk off with a list of its forum users. “On June 6th, 2016, BitTorrent was made aware of a security issue involving the vendor which powers our forums,” the company said in ...

PHPFox 4 Cross Site Scripting

Title : PhpFox4 Cross Site Scripting Vuln. Author : bl4ckMohajeM [email protected] Software Link: http://www.phpfox.com/ Version: 4 Date : 06/09/2016 Category: WebApps Tested with : Ubuntu / Win Description In this Cms theres is a Cross Site Scripting Vurlnerablities in 'nsextt' Parameter...

BitTorrent Forum Hacked; Change your Password Immediately

If you are a torrent lover and have registered on BitTorrent community forum website, then you may have had your personal details compromised, along with your hashed passwords. The BitTorrent team has announced that its community forums have been hacked, which exposed private information of...