7298.top XSS vulnerability

Open Bug Bounty ID: OBB-708375 Description| Value ---|--- Affected Website:| 7298.top Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

top-magazin.de XSS vulnerability

Open Bug Bounty ID: OBB-706542 Description| Value ---|--- Affected Website:| top-magazin.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Julian Assange Charges, Japan's Top Cybersecurity Official, and More Security News This Week

Safer browsing, more bitcoin scams, and the rest of the week's top security news...

OLX: SQL Injection https://www.olx.co.id

I found the SQL Injection security hole on the website https://www.olx.co.id, this is a critical finding. here is the POC from the findings that I got Affectect:https://www.olx.co.id/ajax/buybundle/getbundle/ POC: Request DATA POST /ajax/buybundle/getbundle/ HTTP/1.1 Host: www.olx.co.id User-Agen...

Imperva and Amazon Partner to Help Mitigate Risks Associated With Cloud Migration

Helping our customers reduce the risks associated with migrating to the cloud, and preventing availability and security incidents, has been a major development focus for Imperva over the last several years. Why the partnership matters Although cloud service providers take a host of IT management...

Carbon Black’s Susan An Named to Rev Boston’s 2018 Top 20 Women List

It is a great honor to announce that Rev Boston recently listed Susan An, Senior Director of Corporate Sales at Carbon Black, on its annual ‘Top 20 Women’ list. Susan is part of the fourth cohort of women to be acknowledged by Rev Boston, an event and award recognizing the top women in technology...

Wallarm now available on Azure

Wallarm is excited to announce the native availability of Wallarm node on Azure. While in the past Wallarm customers in Azure environment had to install Wallarm nodes as dynamic modules manually into their Azure instances with NGINX, the new release allows deployment from a pre-configured image...

EulerOS Virtualization 2.5.1 : procps-ng (EulerOS-SA-2018-1326)

According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory...

Introducing the Bot Endpoint Protection Report

Todays comprehensive monitoring capabilities in Security Center provide great insight into bot activity and countermeasures applied across your valuable web properties. Filter options allow you to focus on almost any desired detail. However, understanding what is happening on specific protected...

AirTies Air 5750 Cross-Site Scripting Vulnerability

AirTies Air 5750 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5750. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

AirTies Air 5443v2 Cross-Site Scripting Vulnerability

AirTies Air 5443v2 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in AirTies Air 5443v2. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

AirTies Air 5343v2 Cross-Site Scripting Vulnerability

AirTies Air 5343v2 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5343v2. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

AirTies Air 5650 Cross-Site Scripting Vulnerability

AirTies Air 5650 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5650. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

AirTies Air 5453 Cross-Site Scripting Vulnerability

AirTies Air 5453 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5453. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

AirTies Air 5442 Cross-Site Scripting Vulnerability

AirTies Air 5442 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5442. A remote attacker can exploit the vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

fairfaxredtopcab.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-682819 Description| Value ---|--- Affected Website:| fairfaxredtopcab.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:...

CVE-2018-17590

AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17589

AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17591

AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

Philips iSite/IntelliSpace PACS Vulnerabilities (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Philips Equipment: iSite and IntelliSpace PACS Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Code/Source Code...