Multiple Applications - Local Credentials Disclosure

Multiple Applications - Local Credentials Disclosure. Local exploit for Windows platform Dropbox Desktop Client v9.4.49 64bit Local Credentials Disclosure Tested on Windows Windows Server 2012 R2 64bit, English Vendor Homepage @ https://www.dropbox.com Date 06/09/2016 Bug Discovery by: Yakir Wizm...

secure.logmein.com XSS vulnerability

Open Bug Bounty ID: OBB-162885 Description| Value ---|--- Affected Website:| secure.logmein.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

secure.logmein.com XSS vulnerability

Open Bug Bounty ID: OBB-161433 Description| Value ---|--- Affected Website:| secure.logmein.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

secure.logmein.com XSS vulnerability

Vulnerable URL: https://secure.logmein.com/mycomputersconnecttopc.asp?hostpath=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

secure.logmein.com XSS vulnerability

Vulnerable URL: https://secure.logmein.com/mycomputersconnecttopc.asp?hid=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

solutions.logmein.com XSS vulnerability

Vulnerable URL: http://solutions.logmein.com/BYOA/managing-applications-in-the-age-of-BYOA-report-part-1.html?email=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:35 GMT Vulnerability type:...

secure.logmein.com XSS vulnerability

Open Bug Bounty ID: OBB-157858 Description| Value ---|--- Affected Website:| secure.logmein.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID19699: Email Messages Distributing Malicious Software on November 27, 2015

Medium Alert ID: 42323 First Published: 2015 November 30 14:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19699 and RuleID19699KVR may contain the...

Threat Outbreak Alert RuleID14964: Email Messages Distributing Malicious Software on April 28, 2015

Medium Alert ID: 38559 First Published: 2015 April 29 13:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14964 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID14835: Email Messages Distributing Malicious Software on April 22, 2015

Medium Alert ID: 38489 First Published: 2015 April 22 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14835 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID13601: Email Messages Distributing Malicious Software on February 17, 2015

Medium Alert ID: 37499 First Published: 2015 February 17 20:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13601 may contain the following files: Name |...

Threat Outbreak Alert RuleID12041: Email Messages Distributing Malicious Software on October 20, 2014

Medium Alert ID: 36149 First Published: 2014 October 20 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12041 may contain the following files: Name |...

Threat Outbreak Alert RuleID12010: Email Messages Distributing Malicious Software on October 16, 2014

Medium Alert ID: 36120 First Published: 2014 October 17 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12010 may contain the following files: Name |...

Malware-Laced Emails Appear to Come From LogMeIn

The SANS Internet Storm Center yesterday warned users and administrators to be on the lookout for malicious emails purporting to come from the security and authentication firm LogMeIn. For it’s part, LogMeIn is aware of the attacks, and has issued a number of warnings to its customers on its blog...

Threat Outbreak Alert RuleID11654: Email Messages Distributing Malicious Software on September 22, 2014

Medium Alert ID: 35800 First Published: 2014 September 22 19:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11654 may contain the following files: Name ...

Vulnerability in OpenSSL - Race condition in ssl_parse_serverhello_tlsext

A race condition was found in sslparseserverhellotlsext. If a multithreaded client connects to a malicious server using a resumed session and the server sends an ec point format extension, it could write up to 255 bytes to freed memory. Found by Gabor Tyukasz LogMeIn Inc...

Remote Access Hack Compromises POS Vendor

A popular point of sale vendor may have suffered a data breach earlier this year that could affect customers of a handful of Pacific Northwest restaurants. Vancouver, Wash.-based Information Systems & Supplies, a supplier of POS systems to restaurants such as Dairy Queen, Buffalo Wild Wings and...

POS Machine Vendor Warns of Possible Payment Card Breach at Restaurants

Due to the better track inventory and accuracy of records, Point-of-sale POS systems are being used in most of the industries including restaurants, lodging, entertainment, and museums around the world. It can be easily set-up depending on the nature of the business. Despite that, Point-of-sale P...

LogMeIn 4.0.784 'cfgadvanced.html' HTTP Header Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35236/info LogMeIn is prone to a vulnerability that allows attackers to inject arbitrary HTTP headers because it fails to sufficiently sanitize input. By inserting arbitrary headers into an HTTP response, attackers may be...

LogMeIn Hamachi <= 2.1.0.362 Remote DOS

LogMeIn Hamachi security flaws and steps with a simple python script to provoke an Hamachi Remote D.O.S. This is private exploit. You can buy it at https://0day.today...