CVE-2018-10193

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service browser hang via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements...

CVE-2018-10193: Uncontrolled Resource Consumption

LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service browser hang via an HTML document because the resource consumption of onloadwff.js grows with the number of INPUT elements...

PT-2018-9745

Name of the Vulnerable Software and Affected Versions: LogMeIn LastPass versions through 4.15.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a browser hang, by exploiting an HTML document. This occurs because the resource consumption of onloadwff.js...

CVE-2018-10193

CVE-2018-10193 affects LogMeIn LastPass up to version 4.15.0. The issue is a DoS caused by the onloadwff.js script whose resource consumption grows with the number of INPUT elements in an HTML document, leading to a browser hang. The connected records corroborate the vulnerability description acr...

New Point-of-Sale Malware Steals Credit Card Data via DNS Queries

Cybercriminals are becoming more adept, innovative, and stealthy with each passing day. They are now adopting more clandestine techniques that come with limitless attack vectors and are harder to detect. A new strain of malware has now been discovered that relies on a unique technique to steal...

LogMeIn Client 1.3.2462 (x64) - Local Credentials Disclosure

LogMeIn Client 1.3.2462 x64 - Local Credentials Disclosure LogMeIn Client v1.3.2462 64bit Local Credentials Disclosure Tested on Windows Windows Server 2012 R2 64bit, English Vendor Homepage @ https://secure.logmein.com/home/en Date 06/09/2016 Bug Discovery by: Alexander Korznikov...

LogMeIn Client 1.3.2462 (64bit) Credential Disclosure

LogMeIn Client v1.3.2462 64bit Local Credentials Disclosure Tested on Windows Windows Server 2012 R2 64bit, English Vendor Homepage @ https://secure.logmein.com/home/en Date 06/09/2016 Bug Discovery by: Alexander Korznikov https://www.linkedin.com/in/nopernik http://korznikov.com/ Viktor Minin...

LogMeIn Client 1.3.2462 (x64) - Local Credentials Disclosure

Exploit for windows platform in category local exploits LogMeIn Client v1.3.2462 64bit Local Credentials Disclosure Tested on Windows Windows Server 2012 R2 64bit, English Vendor Homepage @ https://secure.logmein.com/home/en Date 06/09/2016 Bug Discovery by: Alexander Korznikov...

LogMeIn Client 1.3.2462 (x64) - Local Credentials Disclosure

LogMeIn Client v1.3.2462 64bit Local Credentials Disclosure Tested on Windows Windows Server 2012 R2 64bit, English Vendor Homepage @ https://secure.logmein.com/home/en Date 06/09/2016 Bug Discovery by: Alexander Korznikov https://www.linkedin.com/in/nopernik http://korznikov.com/ Viktor Minin...

Multiple Applications - Local Credentials Disclosure

Multiple Applications - Local Credentials Disclosure. Local exploit for Windows platform Dropbox Desktop Client v9.4.49 64bit Local Credentials Disclosure Tested on Windows Windows Server 2012 R2 64bit, English Vendor Homepage @ https://www.dropbox.com Date 06/09/2016 Bug Discovery by: Yakir Wizm...

secure.logmein.com XSS vulnerability

Open Bug Bounty ID: OBB-162885 Description| Value ---|--- Affected Website:| secure.logmein.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

secure.logmein.com XSS vulnerability

Open Bug Bounty ID: OBB-161433 Description| Value ---|--- Affected Website:| secure.logmein.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

secure.logmein.com XSS vulnerability

Vulnerable URL: https://secure.logmein.com/mycomputersconnecttopc.asp?hostpath=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

secure.logmein.com XSS vulnerability

Vulnerable URL: https://secure.logmein.com/mycomputersconnecttopc.asp?hid=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

solutions.logmein.com XSS vulnerability

Vulnerable URL: http://solutions.logmein.com/BYOA/managing-applications-in-the-age-of-BYOA-report-part-1.html?email=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:35 GMT Vulnerability type:...

secure.logmein.com XSS vulnerability

Open Bug Bounty ID: OBB-157858 Description| Value ---|--- Affected Website:| secure.logmein.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID19699: Email Messages Distributing Malicious Software on November 27, 2015

Medium Alert ID: 42323 First Published: 2015 November 30 14:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19699 and RuleID19699KVR may contain the...

Threat Outbreak Alert RuleID14964: Email Messages Distributing Malicious Software on April 28, 2015

Medium Alert ID: 38559 First Published: 2015 April 29 13:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14964 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID14835: Email Messages Distributing Malicious Software on April 22, 2015

Medium Alert ID: 38489 First Published: 2015 April 22 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14835 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID13601: Email Messages Distributing Malicious Software on February 17, 2015

Medium Alert ID: 37499 First Published: 2015 February 17 20:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13601 may contain the following files: Name |...