CVE-2015-5045

CVE-2015-5045 affects IBM RLKS Administration and Reporting Tool. The vulnerability allows a local attacker to obtain sensitive information from RLKS before version 8.1.4.9 iFix 04 due to an unspecified issue in the Administration and Reporting Tool. Affected versions include 8.1.4 and 8.1.4.x up...

gscm-apps.org XSS vulnerability

Open Bug Bounty ID: OBB-592000 Description| Value ---|--- Affected Website:| gscm-apps.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SubOver - A Powerful Subdomain Takeover Tool

Subover is a Hostile Subdomain Takeover tool designed in Python. From start, it has been aimed with speed and efficiency in mind. Till date, SubOver detects 36 services which is much more than any other tool out there. The tool is multithreaded and hence delivers good speed. It can easily detect...

htd01.com XSS vulnerability

Open Bug Bounty ID: OBB-591253 Description| Value ---|--- Affected Website:| htd01.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

floridabankruptcyconsultation.com XSS vulnerability

Open Bug Bounty ID: OBB-588298 Description| Value ---|--- Affected Website:| floridabankruptcyconsultation.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

vendite-straordinarie.com XSS vulnerability

Open Bug Bounty ID: OBB-590829 Description| Value ---|--- Affected Website:| vendite-straordinarie.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

copiadorasenguayaquil.com XSS vulnerability

Open Bug Bounty ID: OBB-587640 Description| Value ---|--- Affected Website:| copiadorasenguayaquil.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OS vulnerabilities detected in banner reporting (PCI-DSS check)

A service banner response from the remote host indicates an OS install at a level that may be vulnerable to one or more vulnerabilities. This plugin only runs when 'Check for PCI-DSS compliance' is enabled in the scan policy. It does not run if local security checks are enabled. It runs off of...

CVE-2018-5505

On F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR are both provisioned, TMM may restart while processing DNS requests when the virtual server is configured with a DNS profile and the Protocol setting is set to TCP...

My short review of “The Forrester Wave: Vulnerability Risk Management, Q1 2018”

Last week, March 14, Forrester presented new report about Vulnerability Risk Management VRM market. You can purchase it on official site for $2495 USD or get a free reprint on Rapid7 site. Thanks, Rapid7! I've read it and what to share my impressions. I was most surprised by the leaders of the...

Microsoft bug bounty program: $250k for reporting Meltdown & Spectre type flaws

By Waqas The bug bounty program will remain open until December 31st, 2018. This is a post from HackRead.com Read the original post: Microsoft bug bounty program: $250k for reporting Meltdown & Spectre type flaws...

perapasha.nl XSS vulnerability

Open Bug Bounty ID: OBB-578714 Description| Value ---|--- Affected Website:| perapasha.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uk.mathworks.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-578067 Description| Value ---|--- Affected Website:| uk.mathworks.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

texasplainstrail.com XSS vulnerability

Open Bug Bounty ID: OBB-575828 Description| Value ---|--- Affected Website:| texasplainstrail.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nl.iherb.com XSS vulnerability

Open Bug Bounty ID: OBB-574908 Description| Value ---|--- Affected Website:| nl.iherb.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

CVE-2018-1195: Cloud Controller API will accept a refresh token for authentication | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions You are using Cloud Controller version prior to 1.46.0 You are using cf-deployment version prior to 1.3.0 You are using cf-release version prior to 283 Description Cloud Controller accepts refresh tokens fo...

Elastic Kibana Reporting plugin 'CVE-2016-1000218' CSRF Vulnerability

Version 2.4.0 of the Reporting plugin for Elastic Kibana is vulnerable to a CSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ai7412tr6555.godo.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-569354 Description| Value ---|--- Affected Website:| ai7412tr6555.godo.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Arbitrary File Read Vulnerability in FineReport Version 8.0

FineReport reporting software is a pure Java written , data display reports and data entry forms functions in one enterprise-class web reporting tools . FineReport 8.0 version of the existence of arbitrary file read vulnerability, an attacker can be exploited to read any file on the site...

nsaohio.com XSS vulnerability

Open Bug Bounty ID: OBB-568070 Description| Value ---|--- Affected Website:| nsaohio.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...