brmethodprofit.com XSS vulnerability

Vulnerable URL: http://brmethodprofit.com/b/special-offer/?clickID=...

WordPress Google SEO Pressor Snippet Plugin <= 1.2.6 - Reflected XSS

This plugin is prone to a reflected cross site scripting vulnerability, because these parameters are not sanitized: "Address Region", "Longitude", "Latitude", "Event type", "Offer aggregate", "Low Price", "High Price", "Offer Url", "Price", "Events Website", "Offer Quantity", "Price valid Until",...

Threat Outbreak Alert RuleID20841: Email Messages Distributing Malicious Software on February 2, 2016

Medium Alert ID: 43375 First Published: 2016 February 2 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20841 may contain the following files: Name |...

Somebody Offered Money to Raspberry Pi Foundation for Pre-Installing Malware

The Raspberry Pi is now gaining attention from malware distributors who want the popular mini-computers to deliver with pre-install malware. The Raspberry Pi Foundation has made a shocking revelation that the charitable foundation has been offered money to install malware onto the Raspberry Pi...

activeyou.co.uk XSS vulnerability

Vulnerable URL: http://www.activeyou.co.uk/offers/marbella/?cid=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

Threat Outbreak Alert RuleID18998: Email Messages Distributing Malicious Software on October 29, 2015

Medium Alert ID: 41752 First Published: 2015 October 27 13:48 GMT Last Updated: 2015 October 29 14:35 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18998...

aromes-et-gourmandises.fr XSS vulnerability

Vulnerable URL: http://www.aromes-et-gourmandises.fr/shop.php?action=%22%22;%3C/script%3E%3Cscript%3Eprompt%28/XSSPOSED/%29%3C/script%3E%3C%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Code injection

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

CVE-2015-1558

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

CVE-2015-1558

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

CVE-2015-1558: Undefined Security Weakness

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...

FreeBSD : asterisk -- File descriptor leak when incompatible codecs are offered (2eeb6652-a7a6-11e4-96ba-001999f8d30b)

The Asterisk project reports : Asterisk may be configured to only allow specific audio or video codecs to be used when communicating with a particular endpoint. When an endpoint sends an SDP offer that only lists codecs not allowed by Asterisk, the offer is rejected. However, in this case, RTP...

dhclient 4.1 - Bash Environment Variable Command Injection (Shellshock)

dhclient 4.1 - Bash Environment Variable Command Injection Shellshock !/usr/bin/python Exploit Title: ShellShock dhclient Bash Environment Variable Command Injection PoC Date: 2014-09-29 Author: @fdiskyou e-mail: rui at deniable.org Version: 4.1 Tested on: Debian, Ubuntu, Kali CVE: CVE-2014-6277,...

Threat Outbreak Alert: Fake Software Offer Email Messages on March 3, 2014

Medium Alert ID: 33167 First Published: 2014 March 4 21:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Employment Offer Email Messages on January 31, 2014

Medium Alert ID: 32643 First Published: 2014 January 31 21:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an employment opportunity for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Job Offer Notification Email Messages on January 16, 2014

Medium Alert ID: 32475 First Published: 2014 January 17 14:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Job Offer Information Email Messages on January 9, 2014

Medium Alert ID: 32388 First Published: 2014 January 9 17:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Job Offer Documents Email Messages on December 24, 2013

Severity Alert ID: 32283 First Published: 2014 January 2 14:43 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on December 24, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND...

Threat Outbreak Alert: Fake Software Offer Email Messages on December 9, 2013

Medium Alert ID: 32100 First Published: 2013 December 10 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a software offer notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Job Offer Notification Email Messages on November 19, 2013

Medium Alert ID: 31826 First Published: 2013 November 19 17:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a job offer from Altran Company for the recipient. The text in the email message attempts to convince the...