smtmax.com XSS vulnerability

On the 17.01.2018 security researcher reported a XSS vulnerability affecting the smtmax.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 17 January, 2018 11:12...

heavenpeace.org XSS vulnerability

Open Bug Bounty ID: OBB-527399 Description| Value ---|--- Affected Website:| heavenpeace.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cpsc.gov XSS vulnerability

Open Bug Bounty ID: OBB-527305 Description| Value ---|--- Affected Website:| cpsc.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

MySQL Enterprise Monitor 3.3.x < 3.3.7.3306 / 3.4.x < 3.4.5.4248 / 4.0.x < 4.0.2.5168 Multiple Vulnerabilities (January 2018 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.3.x prior to 3.3.7.3306, 3.4.x prior to 3.4.5.4248, or 4.0.x prior to 4.0.2.5168. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch...

Oracle VM VirtualBox 5.1.x < 5.1.32 / 5.2.x < 5.2.6 (January 2018 CPU)

The version of Oracle VM VirtualBox running on the remote host is 5.1.x prior to 5.1.32 or 5.2.x prior to 5.2.6. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for addition...

CVE-2018-0777

creationtimestamp| type| source ---|---|--- 2018-01-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43718 2018-01-17 07:18:26+00:00| published-proof-of-concept| https://t.me/antichat/651 2018-01-17 08:44:45+00:00| published-proof-of-concept| https://t.me/br0wsec/20...

CVE-2018-0780

creationtimestamp| type| source ---|---|--- 2018-01-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43720 2018-01-17 08:44:45+00:00| published-proof-of-concept| https://t.me/br0wsec/20...

CVE-2018-0769

creationtimestamp| type| source ---|---|--- 2018-01-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43710 2018-01-17 07:18:26+00:00| published-proof-of-concept| https://t.me/antichat/651 2018-01-17 08:44:45+00:00| published-proof-of-concept| https://t.me/br0wsec/20...

MySQL 5.7.x < 5.7.21 Multiple Vulnerabilities (January 2018 CPU)

The version of MySQL running on the remote host is 5.7.x prior to 5.7.21. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note that Nessus has no...

MySQL 5.5.x < 5.5.59 Multiple Vulnerabilities (RPM Check) (January 2018 CPU)

The version of MySQL running on the remote host is 5.5.x prior to 5.5.59. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note that Nessus has no...

Oracle E-Business Multiple Vulnerabilities (January 2018 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2018 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs f...

MySQL 5.7.x < 5.7.21 Multiple Vulnerabilities (RPM Check) (January 2018 CPU)

The version of MySQL running on the remote host is 5.7.x prior to 5.7.21. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note that Nessus has no...

CVE-2018-0775

creationtimestamp| type| source ---|---|--- 2018-01-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43717...

MySQL 5.5.x < 5.5.59 Multiple Vulnerabilities (January 2018 CPU)

The version of MySQL running on the remote host is 5.5.x prior to 5.5.59. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note that Nessus has no...

Oracle Releases January 2018 Security Bulletin

Oracle has released its Critical Patch Update for January 2018 to address 237 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to obtain access to sensitive information. NCCIC/US-CERT encourages users and administrators to review the Oracle...

montage.allenisd.org XSS vulnerability

Open Bug Bounty ID: OBB-524107 Description| Value ---|--- Affected Website:| montage.allenisd.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stitchtherapyneedlepoint.com XSS vulnerability

Open Bug Bounty ID: OBB-523256 Description| Value ---|--- Affected Website:| stitchtherapyneedlepoint.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

global-sport.cz XSS vulnerability

Open Bug Bounty ID: OBB-519838 Description| Value ---|--- Affected Website:| global-sport.cz Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

juif.org XSS vulnerability

Open Bug Bounty ID: OBB-519792 Description| Value ---|--- Affected Website:| juif.org Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...

Cisco’s new tool will detect malware in encrypted traffic

By Waqas On January 10, Cisco’s officially released its software platform Encrypted This is a post from HackRead.com Read the original post: Ciscos new tool will detect malware in encrypted traffic...