Threat Outbreak Alert RuleID30872: Email Messages Distributing Malicious Software on October 6, 2017

Medium Alert ID: 55539 First Published: 2017 October 6 17:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30872 may contain the following files: Name |...

trainbleu.co.kr XSS vulnerability

Vulnerable URL: http://www.trainbleu.co.kr/home/mview.php?psdb=event1boid=56%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8753089...

www2.gwd50.org Open Redirect vulnerability

Vulnerable URL: https://www2.gwd50.org/emd-web/flash/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

fedex.com XSS vulnerability

Vulnerable URL: http://www.fedex.com/us/account/fbo/demo/detect/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 452 VIP...

horrorchannel.co.uk XSS vulnerability

Vulnerable URL: http://www.horrorchannel.co.uk/articles.php?feature==13'"73 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 679883 VIP website status:| No Coordinated Disclosure...

internationalfurniture.co.uk XSS vulnerability

Vulnerable URL: http://www.internationalfurniture.co.uk/pages/extranet/index.php?category=13'"76 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

mp3.yeni.pro XSS vulnerability

Vulnerable URL: http://mp3.yeni.pro/index.php?mod=search=13'"6 9 canli 90 lar=CAoQAA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Arbitrary Code Execution

October is vulnerable to arbitrary code execution. A malicious user with media management permission or asset management permission can upload a malicious file to the application, resulting in arbitrary PHP code be executed when the file is deserialized...

Threat Outbreak Alert RuleID30847: Email Messages Distributing Malicious Software on October 5, 2017

Medium Alert ID: 55524 First Published: 2017 October 5 16:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30847 may contain the following files: Name |...

Threat Outbreak Alert RuleID30862: Email Messages Distributing Malicious Software on October 5, 2017

Medium Alert ID: 55518 First Published: 2017 October 5 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30862 may contain the following files: Name |...

Threat Outbreak Alert RuleID30776: Email Messages Distributing Malicious Software on October 5, 2017

Medium Alert ID: 55520 First Published: 2017 October 5 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30776 may contain the following files: Name |...

d-silence.com XSS vulnerability

Vulnerable URL: http://www.d-silence.com/feature.php?id=246%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6515079 VIP website...

CVE-2017-1000119

October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...

CVE-2017-1000119

October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...

Unrestricted file upload

October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...

Threat Outbreak Alert RuleID30774: Email Messages Distributing Malicious Software on October 4, 2017

Medium Alert ID: 55510 First Published: 2017 October 4 19:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30774 may contain the following files: Name |...

artlebedev.com XSS vulnerability

Vulnerable URL: https://www.artlebedev.com/search/?tab=%3C/script%3E%3Csvg%20onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 326993 VIP website status:| No...

nottingham.ac.uk XSS vulnerability

Vulnerable URL: http://www.nottingham.ac.uk/plzcnlab/publications.php?id=23746350%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9592 VIP website status:| Yes Chec...

gosearchwebsite.herokuapp.com XSS vulnerability

Open Bug Bounty ID: OBB-322510 Description| Value ---|--- Affected Website:| gosearchwebsite.herokuapp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-1000119

October CMS build 412 is vulnerable to PHP code execution via the file upload functionality, potentially allowing site compromise and server-wide impact. The vulnerability is documented across multiple sources (NVD entry CVE-2017-1000119; GitHub/OSV/OSVDB advisories; Metasploit module and exploit...