Information disclosure

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16203

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16202

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16206

The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

Liberapay: Able to View other users income history

Hello, I found an IDOR that i was able to view income history of other users, Steps to reproduce issue, 1. Login into account and fire up Burpsuite 2. The got to profile page and click on view income history 3. Then you can see a request like GET /Liberapay/charts.json HTTP/1.1 Host: liberapay.co...

Threat Outbreak Alert RuleID32863: Email Messages Distributing Malicious Software on June 1, 2018

Medium Alert ID: 57996 First Published: 2018 June 1 18:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32863 may contain the following files: Name | Size...

CVE-2012-10032

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/maxthonhistoryxcs.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

CVE-2018-1369

IBM Security Guardium Big Data Intelligence SonarG 3.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 137767...

CVE-2018-1369

IBM Security Guardium Big Data Intelligence SonarG 3.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 137767...

Threat Outbreak Alert RuleID32845: Email Messages Distributing Malicious Software on May 29, 2018

Medium Alert ID: 57973 First Published: 2018 May 29 12:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32845 may contain the following files: Name | Size...

Burpa - A Burp Suite Automation Tool

A Burp Suite Automation Tool With Slack Integration. Requirements burp-rest-api Burp Suite Professional slackclient Usage $ python burpa.py -h / / / / / / / / / / / // / // / / / // / // / /./,// / ./,/ // burpa version 0.1 / by 0x4D31 usage: burpa.py -h -a scan,proxy-config,stop -pP PROXYPORT...

Threat Outbreak Alert RuleID32834: Email Messages Distributing Malicious Software on May 24, 2018

Medium Alert ID: 57961 First Published: 2018 May 24 20:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32834 may contain the following files: Name | Size...

CVE-2018-1000049

creationtimestamp| type| source ---|---|--- 2018-05-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44638 2018-07-16 23:15:15+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/claymoredualminerremotemanagerrce.rb 2018-07-17...

Threat Outbreak Alert RuleID32781: Email Messages Distributing Malicious Software on May 16, 2018

Medium Alert ID: 57905 First Published: 2018 May 16 14:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32781 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32749: Email Messages Distributing Malicious Software on May 11, 2018

Medium Alert ID: 57871 First Published: 2018 May 11 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32749 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32735: Email Messages Distributing Malicious Software on May 10, 2018

Medium Alert ID: 57852 First Published: 2018 May 10 13:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32735 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32734: Email Messages Distributing Malicious Software on May 10, 2018

Medium Alert ID: 57851 First Published: 2018 May 10 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32734 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32710: Email Messages Distributing Malicious Software on May 10, 2018

Medium Alert ID: 57843 First Published: 2018 May 10 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32710 may contain the following files: Name | Size...

Valve: Aapp name leakage on economy history page

App name leakage on economy history page Partners with authorization to view economy logs for their own titles could be presented with a list of all game titles that have used economy features...

seamheads.com XSS vulnerability

Open Bug Bounty ID: OBB-613523 Description| Value ---|--- Affected Website:| seamheads.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...