CVE-2015-1996

IBM QRadar Incident Forensics 7.2.x vulnerable to cacheable SSL pages that can expose sensitive local-cache data to a local attacker with an unattended workstation. Affected: QRadar Incident Forensics 7.2.x prior to 7.2.5 Patch 5. CVSS base score 2.1 (LOW). Remediation: apply IBM QRadar 7.2.5 Pat...

CVE-2015-1993

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session...

deakin.edu.au XSS vulnerability

Vulnerable URL: https://www.deakin.edu.au/password/change/ Details: Description| Value ---|--- Patched:| Yes, at 10.11.2015 Latest check for patch:| 10.11.2015 23:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21888 Google Pagerank| 8 VIP website status:| Ye...

CVE-2015-1999: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...

PT-2015-5542

Name of the Vulnerable Software and Affected Versions IBM Security QRadar Incident Forensics versions 7.2.x through 7.2.5 before Patch 5 Description The issue allows remote attackers to obtain sensitive information by reading web-server access logs, web-server Referer logs, or the browser history...

PT-2015-5540

Name of the Vulnerable Software and Affected Versions IBM Security QRadar Incident Forensics versions 7.2.x through 7.2.5 before Patch 5 Description The issue allows physically proximate attackers to obtain sensitive local-cache information by leveraging an unattended workstation, due to the...

PT-2015-5537

Name of the Vulnerable Software and Affected Versions IBM Security QRadar Incident Forensics versions 7.2.x through 7.2.5 before Patch 5 Description The issue makes it easier for remote attackers to capture cookies by intercepting their transmission within an http session, as the secure flag is n...

CVE-2015-1993: Undefined Security Weakness

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session...

gettyimages.it XSS vulnerability

Vulnerable URL: http://www.gettyimages.it/video/scriptscriptalertxssposedscript?collections=imbr,imbl=false=creative=1=%3C%2Fscript%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E=best Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:3...

lesplatsdusoleil.fr XSS vulnerability

Vulnerable URL: http://www.lesplatsdusoleil.fr//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1...

cd.edb.gov.hk XSS vulnerability

Vulnerable URL: https://cd.edb.gov.hk/la03/chi/teachresouce/clipartcollection/TPSsearch.htm?keywords=%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E∧=0 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:28 GMT Vulnerability type...

Ubiquiti Networks Hardcoded Keys / Remote Management

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Insecure default configuration product: various Ubiquiti Networks products vulnerable version: see Vulnerable / tested versions fixed version: none available impact: High...

XcodeGhost Malware Supports iOS9

New samples of XcodeGhost, malware targeting iOS devices, have surfaced beyond the borders of China with new support for iOS9 and obfuscation techniques making it that much harder to detect. iOS9 is only a few weeks old and included new security measures that allowed for only secure HTTPS...

ip-https-discover NSE Script

Checks if the IP over HTTPS IP-HTTPS Tunneling Protocol 1 is supported. IP-HTTPS sends Teredo related IPv6 packets over an IPv4-based HTTPS session. This indicates that Microsoft DirectAccess 2, which allows remote clients to access intranet resources on a domain basis, is supported. Windows...

isolana.es XSS vulnerability

Vulnerable URL: http://www.isolana.es/es/accesoclientes.php?d=1="'; Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 671373 Google Pagerank| 2 VIP website...

ratemyjob.com XSS vulnerability

Vulnerable URL: http://www.ratemyjob.com/article/search/%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E.html Details: Description| Value ---|--- Patched:| Yes, at 23.11.2015 Latest check for patch:| 23.11.2015 17:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

isimtescil.net XSS vulnerability

Vulnerable URL: https://www.isimtescil.net/SSLDetay.aspx?ssl=1=1=1;alert/XSSPOSED/; Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3998 Google Pagerank| 6...

girlsinlove.xxx XSS vulnerability

Vulnerable URL: http://girlsinlove.xxx/login.php Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3480342 Google Pagerank| 0 VIP website status:| No Check...

ethnixtours.com XSS vulnerability

Vulnerable URL: http://www.ethnixtours.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18468151 Google Pagerank| 2 VIP website status:...

ZIB - The Open Tor Botnet

General information and instructions. The Open Tor Botnet requires the installation and configuration of bitcoind, however I neglect to detail this here out of a lack of time. This bot-net is fully undetectable and bypasses all antivirus through running on top of Python27's pyinstaller, which is...