vBulletin LFI

Local file include vulnerability in vBulletin routestring parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

vivahakala.com XSS vulnerability

Open Bug Bounty ID: OBB-453057 Description| Value ---|--- Affected Website:| vivahakala.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

OpenEMR 5.0.0 RCE

Remote command execution vulnerability in OpenEMR faxdispatch.php formfilename parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

Are you ready for the holidays?

It's November, which means the holiday season is upon us and retailers are working tirelessly to get their websites, apps and infrastructures ready to deliver a secure and exceptional customer experience during the peak holiday season. If past data is any indication of things to come, 2017 promis...

Kaspersky Lab – Beyond Black Friday Threat Report, November 2017

Introduction The festive holiday shopping season, which covers Thanksgiving, Black Friday and Cyber Monday in late November as well as Christmas in December, now accounts for a significant share of annual sales for retailers, particularly in the U.S., Europe and APAC. Those selling clothing,...

Threat Outbreak Alert RuleID30923: Email Messages Distributing Malicious Software on November 13, 2017

Medium Alert ID: 55882 First Published: 2017 November 13 12:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30923 may contain the following files: Name |...

startup-jobs-germany.com XSS vulnerability

Open Bug Bounty ID: OBB-410617 Description| Value ---|--- Affected Website:| startup-jobs-germany.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

technical-sales-jobs.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-410597 Description| Value ---|--- Affected Website:| technical-sales-jobs.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

technical-sales-jobs.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-407545 Description| Value ---|--- Affected Website:| technical-sales-jobs.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

sales-negotiator.com XSS vulnerability

Open Bug Bounty ID: OBB-407509 Description| Value ---|--- Affected Website:| sales-negotiator.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

riversidecarsales.co.uk XSS vulnerability

Vulnerable URL: http://www.riversidecarsales.co.uk/searchpage.php?make==any+model=%27%22%3e%3csvg/onload=confirm/openbugbounty/%3e Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5571638 VIP website status:| No...

cheshiremotorcarsales.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-390949 Description| Value ---|--- Affected Website:| cheshiremotorcarsales.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

cliffordcarsales.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-390912 Description| Value ---|--- Affected Website:| cliffordcarsales.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

cathedralroadcarsales.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-390716 Description| Value ---|--- Affected Website:| cathedralroadcarsales.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

sussexautosales.com XSS vulnerability

Open Bug Bounty ID: OBB-385635 Description| Value ---|--- Affected Website:| sussexautosales.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

CiviCRM SQL Injection

SQL injection vulnerability in CiviCRM civicrm/report/list grp parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Ultimate Form Builder Lite SQL Injection

SQL Injection vulnerability in WordPress Ultimate Form Builder Lite plugin /classes/ufbl-lib.php formid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Trend Micro Mobile Security for Enterprise SQL Injection

SQL injection vulnerability in Trend Micro Mobile Security for Enterprise assignpolicy action Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...