createhistory.create.net XSS vulnerability

Vulnerable URL: http://createhistory.create.net/shop/search.php?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 16.11.2015 Latest check for patch:| 16.11.2015 16:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Joomla Sqli vulnerability analysis-vulnerability warning-the black bar safety net

A vulnerability analysis of the vulnerability trigger code is located at:/administrator/components/comcontenthistory/models/history.php, getListQueryfunction: ! Through the SQL and the error message, you can know that our injected payload is inserted into the red box part. Follow the...

Threat Outbreak Alert RuleID19208: Email Messages Distributing Malicious Software on November 6, 2015

Medium Alert ID: 41976 First Published: 2015 November 9 14:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19208 may contain the following files: Name |...

Design/Logic Flaw

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...

Threat Outbreak Alert RuleID19172: Email Messages Distributing Malicious Software on November 5, 2015

Medium Alert ID: 41949 First Published: 2015 November 5 14:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19172 may contain the following files: Name |...

Multiple Cross-Site Scripting Vulnerabilities in Fortinet FortiManager (CNVD-2015-07355)

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and managemen...

CVE-2015-7808

creationtimestamp| type| source ---|---|--- 2015-11-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38629 2015-11-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38790 2017-07-11 02:04:41+00:00| published-proof-of-concept| https://t.me/HackingPublicoficial/162...

Threat Outbreak Alert RuleID19169: Email Messages Distributing Malicious Software on November 4, 2015

Medium Alert ID: 41934 First Published: 2015 November 4 16:10 GMT Last Updated: 2015 November 5 13:21 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19169...

Threat Outbreak Alert RuleID19146: Email Messages Distributing Malicious Software on November 4, 2015

Medium Alert ID: 41928 First Published: 2015 November 4 14:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19146 may contain the following files: Name |...

Joomla! com_contenthistory component information disclosure vulnerability

Joomla! is an open source content management system CMS. An information disclosure vulnerability exists in the Joomla! comcontenthistory component, which can be exploited by remote attackers to obtain sensitive information...

Threat Outbreak Alert RuleID19039: Email Messages Distributing Malicious Software on October 30, 2015

Medium Alert ID: 41781 First Published: 2015 October 28 19:59 GMT Last Updated: 2015 November 2 13:20 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19039...

Threat Outbreak Alert RuleID19005: Email Messages Distributing Malicious Software on October 27, 2015

Medium Alert ID: 41763 First Published: 2015 October 28 13:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19005 may contain the following files: Name |...

Joomla CMS 3.2-3.4.4 SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

Yesterday, the Joomla CMS released a new version 3. 4. 5, This version fixes a high-riskSQL injectionvulnerabilities, 3. 2 to 3. 4. 4 versions are affected. The attacker via the exploit you can get a direct access to the database of sensitive information, and can even get logged in the...

Joomla Content History SQLi Remote Code Execution

This module exploits a SQL injection vulnerability found in Joomla versions 3.2 up to 3.4.4. The vulnerability exists in the Content History administrator component in the core of Joomla. Triggering the SQL injection makes it possible to retrieve active Super User sessions. The cookie can be used...

Threat Outbreak Alert RuleID18891: Email Messages Distributing Malicious Software on October 23, 2015

Medium Alert ID: 41671 First Published: 2015 October 22 16:20 GMT Last Updated: 2015 October 23 15:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18891...

Bad performance noticed on issues with long history

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-45903. panel Performing some testing with JIRA 6.4.5, I've noticed that there is a huge difference when logging work on an issue with no...

Bad performance noticed on issues with long history

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-45903. panel Performing some testing with JIRA 6.4.5, I've noticed that there is a huge difference when logging work on an issue with no...

Bad performance noticed on issues with long history

Performing some testing with JIRA 6.4.5, I've noticed that there is a huge difference when logging work on an issue with no history and on an issue with a long history. I enabled Profiling on JIRA to check the difference: Example 1: Issue with 858 entries on history: noformat 2015-10-21...

Threat Outbreak Alert RuleID18764: Email Messages Distributing Malicious Software on October 20, 2015

Medium Alert ID: 41614 First Published: 2015 October 20 20:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18764 may contain the following files: Name |...

Threat Outbreak Alert RuleID18572: Email Messages Distributing Malicious Software on October 12, 2015

Medium Alert ID: 41484 First Published: 2015 October 12 12:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18572 may contain the following files: Name |...