asedo.co.uk XSS vulnerability

Vulnerable URL: https://asedo.co.uk/search/?keyword=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9761908 VIP website status:| No Check...

ardillacamping.com.ar XSS vulnerability

Vulnerable URL: http://www.ardillacamping.com.ar/busqueda.php?s=calzado"=borceguies=varios Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Vulnerability of the Windows operating system, allowing a perpetrator to compromise accounts

The vulnerability of the ActiveSyncProvider library in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to accounts by exploiting a flaw in Universal Outlook to establish a secure connection...

CVE-2016-3312

CVE-2016-3312 is an information-disclosure vulnerability in Microsoft Windows where Universal Outlook/ActiveSyncProvider could leak credentials when a secure connection could not be established. Multiple connected sources confirm the issue affects Windows 10 (Gold) and 1511, enabling an attacker ...

Universal Outlook Information Disclosure Vulnerability

An information disclosure vulnerability exists when Universal Outlook fails to establish a secure connection. An attacker could use this vulnerability to obtain the username and password of a user. The update addresses the vulnerability by preventing Universal Outlook from disclosing usernames an...

CVE-2016-1731

Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by modifying the client-server data stream...

Cisco WSA HTTPS Packet Processing Denial of Service Vulnerability

Cisco WSA Software is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

wwwa-e.ucl.ac.uk XSS vulnerability

Vulnerable URL: https://wwwa-e.ucl.ac.uk/cgi-bin/dropbox/dropbox.cgi?state=pickupinfo=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:41 GMT Vulnerability type:| XSS Vulnerability status:| Public...

Lightweight themes on Firefox for Android do not verify a secure connection — Mozilla

Mozilla developer Margaret Leibovic reported when Firefox for Android installs lightweight themes, it does not check to verify that they are served over an HTTPS connection. Instead, themes can be installed over an unencrypted connection, which could allow for a man-in-the-middle MITM attack by...

Google Search Engine Rank Prefers HTTPS

Nothing in Google’s arsenal carries more weight than its search engine rankings. Pair that weapon with a desire to inspire encrypted connections on the web, and you have a pretty powerful combination. More than a year ago, Google said it was testing a method where a site’s search ranking would be...

CVE-2014-4825

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not properly implement secure connections, which allows man-in-the-middle attackers to discover cleartext credentials via unspecified vectors...

Google Moves to Boost Search Ranking For HTTPS Sites

In the last couple of years, Google has been making a series of changes to its Web infrastructure to employ encryption more widely and help defeat active attackers. Much of this has gone on in the background, with the company securing the links between its data centers and making other...

Microsoft Internet Explorer 6.0 Meta Data Foreign Domain Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10248/info A vulnerability has been reported in Microsoft Internet Explorer that may facilitate certificate spoofing. This issue could aid in attacks which falsify web content to victim users. The cause of the vulnerabili...

Apple iTunes Tutorials Window Security Bypass Vulnerability - Mac OS X

Apple iTunes is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes";...

Google Wallet Secure Connection Detection

Binary data 6974.prm...

Paypal secure connection detection

Binary data 6973.prm...

New Mac malware opens secure connection for a remote hacker

A new malware threat for the Mac has been discovered that attempting to set up a secure connection for a remote hacker to connect through and grab private information. Dubbed "Pintsized" that uses a modified version of OpenSSH to potentially set up a remote connection into Mac accounts. This...

New Mac malware opens secure connection for a remote hacker

A new malware threat for the Mac has been discovered that attempting to set up a secure connection for a remote hacker to connect through and grab private information. Dubbed "Pintsized" that uses a modified version of OpenSSH to potentially set up a remote connection into Mac accounts. This...

Olympic Flavored 419 Scams Exploit London Games Fervor

Olympic themed fraud, email scams, and spam campaigns are so banal right now that the official website of the 2012 London Olympic Games contains not only a ‘stay safe online’ page but has also compiled a downloadable list of known scams. The “Stay safe online” page of the London Games’ website...

Twitter Gives Users Option to Turn On HTTPS by Default

Twitter has changed the way that users access the company’s main site, now giving them the option to enable HTTPS by default, forcing a secure connection for most interaction with the service. However, the change does not apply to all of the popular apps users employ to access Twitter on...