Progea Movicon 11.5.1181 Search Path Issues Vulnerability

Progea Movicon versions 11.5.1181 and below suffer from search path related vulnerabilities. Vendor: Progea Equipment: Movicon SCADA/HMI Vulnerability: Uncontrolled Search Path Element, Unquoted Search Path or Element Advisory URL...

Progea Movicon 11.5.1181 Search Path Issues

Vendor: Progea Equipment: Movicon SCADA/HMI Vulnerability: Uncontrolled Search Path Element, Unquoted Search Path or Element Advisory URL https://ipositivesecurity.com/2017/10/28/ics-progea-movicon-scadahmi-vulnerabilities/ ICS-CERT Advisory https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01...

pmcc-india.com XSS vulnerability

Open Bug Bounty ID: OBB-375971 Description| Value ---|--- Affected Website:| pmcc-india.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Q2 2017 Global DDoS Threat Landscape Report

This week we released our latest Global DDoS Threat Landscape Report, a statistical analysis of more than 15,000 network and application layer DDoS attacks mitigated by Imperva Incapsula services during Q2 2017. This quarter, for the fifth one in a row, we saw a decrease in the number of network...

indiaeducation.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-322796 Description| Value ---|--- Affected Website:| indiaeducation.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

hydraulicspressindia.com XSS vulnerability

Vulnerable URL: http://hydraulicspressindia.com/details.php?cid=hack%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

isapindia.org XSS vulnerability

Vulnerable URL: http://www.isapindia.org/search.php?keyword=%3Cimg%20src=x%20onerror=%22alert%28/XSSPOSED/%29%22%20%3C/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 970774 VIP...

CVE-2017-13779

GSTNofflinetool in India Goods and Services Tax Network GSTN Offline Utility tool before 1.2 executes winstart-server.vbs from the "C:\GST Offline Tool" directory, which has insecure permissions. This allows local users to gain privileges by replacing winstart-server.vbs with arbitrary VBScript...

CVE-2017-13779

GSTNofflinetool in India Goods and Services Tax Network GSTN Offline Utility tool before 1.2 executes winstart-server.vbs from the "C:\GST Offline Tool" directory, which has insecure permissions. This allows local users to gain privileges by replacing winstart-server.vbs with arbitrary VBScript...

CVE-2017-13779

GSTN_offline_tool (GSTN Offline Utility) prior to version 1.2 stores winstart-server.vbs in C:\GST Offline Tool with insecure permissions, enabling local privilege escalation by replacing the VBScript with arbitrary code (e.g., a reverse shell). Affected: GSTN Offline Utility before 1.2. Root cau...

IWEBSOUL CMS 1.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Title: ======= IWEBSOUL CMS - Multiple Cross Site Scripting Vulnerabilities Introduction: ============== Intrepid Websoul Private Limited - iWebsoul is a rapidly growing IT Solution provider in India. Team comprehensively works to create a...

IWEBSOUL CMS 1.0 SQL Injection

Title: ======= IWEBSOUL CMS - Multiple SQL Injection Vulnerabilities & Authentication Bypass Introduction: ============== Intrepid Websoul Private Limited - iWebsoul is a rapidly growing IT Solution provider in India. Team comprehensively works to create a unique business and industry based...

organicindia.com XSS vulnerability

Open Bug Bounty ID: OBB-289780 Description| Value ---|--- Affected Website:| organicindia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

morphyrichardsindia.com XSS vulnerability

Vulnerable URL: https://www.morphyrichardsindia.com/productsearch.aspx?txtSearch=OPENBUGBOUNTY';prompt'OPENBUGBOUNTY=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 432568 VIP...

WAP-billing Trojan-Clickers on rise

During the preparation of the "IT threat evolution Q2 2017" report I found several common Trojans in the "Top 20 mobile malware programs" list that were stealing money from users using WAP-billing - a form of mobile payment that charges costs directly to the user's mobile phone bill so they don't...

Level up your cybersecurity journey with CLOUDSEC 2017

Beginning this month, Trend Micro will be hosting CLOUDSEC, one of the largest cybersecurity conferences across Asia-Pacific and Europe. The event features presentations and panel discussions from industry experts and thought leaders who will discuss high-level strategies, forward looking securit...

taxmanagementindia.com XSS vulnerability

Vulnerable URL: https://www.taxmanagementindia.com/search/tmisearch.asp?text2=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

India arrest 4 for leaking ‘Game Of Thrones’ Episode 4 of Season 7

By Carolina Law enforcement authorities in India have arrested four people for This is a post from HackRead.com Read the original post: India arrest 4 for leaking Game Of Thrones Episode 4 of Season 7...

careers.staples.in XSS vulnerability

Open Bug Bounty ID: OBB-276489 Description| Value ---|--- Affected Website:| careers.staples.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

india.4you.com Open Redirect vulnerability

Vulnerable URL: http://india.4you.com/go.cgi?go=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.10.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...