Chrome Universal XSS using deferred history loads (CVE-2016-1675)

VULNERABILITY DETAILS When a ScopedPageLoadDeferrer is destroyed, the deferring state is updated on the associated pages and loaders. If any history of load was set aside during the event loop the deferrer has been protecting, it's processed during the update without checking if navigation is...

Threat Outbreak Alert RuleID28796: Email Messages Distributing Malicious Software on April 17, 2017

Medium Alert ID: 53487 First Published: 2017 April 17 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28796 may contain the following files: Name | Si...

CVE-2017-0145

creationtimestamp| type| source ---|---|--- 2017-04-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41891 2017-05-15 08:36:10+00:00| seen| MISP/591948ff-adb0-4b15-836a-72dfbce2ab96 2017-05-16 12:25:49+00:00| seen| MISP/5919c895-3268-45eb-9b7b-2a8995ca48b7 2017-05-16...

Gratipay: CSV injection in gratipay.com via payment history export feature.

I discovered this issues thanks to Matt who pointed out that the participant's name is directly placed into a CSV file: https://github.com/gratipay/gratipay.com/issues/4399issuecomment-292250609 Summary --- Gratipay allows users to export payment history as a .csv file. By injecting a payload int...

CVE-2017-4964: BOSH Azure CPI code injection vulnerability | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Versions Affected BOSH Azure CPI Release v22 Description The BOSH Azure CPI could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director. Mitigation OSS users are strongly encouraged to follow the...

Threat Outbreak Alert RuleID28582: Email Messages Distributing Malicious Software on April 3, 2017

Medium Alert ID: 53300 First Published: 2017 April 3 17:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28582 may contain the following files: Name | Siz...

CVE-2017-2384

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the "Safari" component. It allows local users to identify the web-site visits that occurred in Private Browsing mode...

BSA-2017-234

Security Advisory ID : BSA-2017-234 Component : Linux Kernel Revision : 2.0: Interim Race condition in net/packet/afpacket.cin the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service use-after-free by leveraging the CAPNETRAW capability to change a socke...

falkirklocalhistorysociety.co.uk XSS vulnerability

Vulnerable URL: http://www.falkirklocalhistorysociety.co.uk/home/index.php?id=107"';-- Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4538723 VIP website...

Threat Outbreak Alert RuleID28520: Email Messages Distributing Malicious Software on March 29, 2017

Medium Alert ID: 53219 First Published: 2017 March 29 20:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28520 may contain the following files: Name | Si...

CVE-2016-6102

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM Reference : 2000359...

Boat Tab History Add-on - External URLs, Runtime command execution, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Boat Tab History Add-on published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID28408: Email Messages Distributing Malicious Software on March 22, 2017

Medium Alert ID: 53118 First Published: 2017 March 22 14:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28408 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28309: Email Messages Distributing Malicious Software on March 22, 2017

Medium Alert ID: 53111 First Published: 2017 March 22 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28309 may contain the following files: Name | Si...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2017:0714-1)

This update for MozillaFirefox to ESR 45.8 fixes the following issues: Security issues fixed bsc1028391 : - CVE-2017-5402: Use-after-free working with events in FontFace objects - CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping - CVE-2017-5400: asm.js...

Threat Outbreak Alert RuleID28324: Email Messages Distributing Malicious Software on March 15, 2017

Medium Alert ID: 53043 First Published: 2017 March 15 15:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28324 may contain the following files: Name | Si...

Mozilla: Pixel and history stealing via floating-point timing side channel with SVG filters (MFSA 2017-06)

Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information...

history-shop.de XSS vulnerability

Vulnerable URL: https://www.history-shop.de/cgi-bin/custom/cat-suche.pl?language=dUTF8=1=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:|...

Threat Outbreak Alert RuleID28187: Email Messages Distributing Malicious Software on March 8, 2017

Medium Alert ID: 52961 First Published: 2017 March 8 16:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28187 may contain the following files: Name | Siz...

Mozilla: Pixel and history stealing via floating-point timing side channel with SVG filters (MFSA 2017-06)

Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information...