Employee infects US govt network with malware after visiting 9,000 porn sites

By Uzair Amir Due to the carelessness of an employee, who apparently was a porn fan, the network of the satellite imaging facility, the U.S. Geological Survey USGS at the EROS Center, South Dakota got infected with malware. An audit carried out by the U.S. Department of the Interior’s inspector...

visitoestfold.com XSS vulnerability

Open Bug Bounty ID: OBB-681948 Description| Value ---|--- Affected Website:| visitoestfold.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

josephinesvegetablesnoherbicidesince1982.farmvisit.com XSS vulnerability

Open Bug Bounty ID: OBB-653563 Description| Value ---|--- Affected Website:| josephinesvegetablesnoherbicidesince1982.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...

WordPress Page Visit Counter plugin <= 4.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability found by ThreatPress Security Research Team in WordPress Page Visit Counter plugin versions = 4.4. Solution Update the WordPress Page Visit Counter plugin to the latest available version at least 4.5...

Google Chrome Page Access Status Disclosure Vulnerability

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in Google Chrome versions prior to 67.0.3396.62. The vulnerability can be exploited by ...

WordPress Page Visit Counter plugin <= 4.0.9 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by ThreatPress Research Team in WordPress Page Visit Counter plugin versions = 4.0.9. Solution Update the WordPress Page Visit Counter plugin to the latest available version at least 4.1...

visit-montenegro.com XSS vulnerability

Open Bug Bounty ID: OBB-610871 Description| Value ---|--- Affected Website:| visit-montenegro.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-16397

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.4 Description The issue involves the PDFKit component and allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document. Recommendations For macOS versions prior to 10.13.4, update...

visitmaramures.ro XSS vulnerability

Open Bug Bounty ID: OBB-593607 Description| Value ---|--- Affected Website:| visitmaramures.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PYSEC-2018-111

Ajenti version version 2 contains a Cross ite Request Forgery CSRF vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server . This attack appear to be exploitable via Being a CSRF, victim interaction is needed, when the...

CVE-2017-17777

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter...

Exiv2 Denial of Service Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel. A security vulnerability exists in the 'Internal::TiffReader::visitDirectory' function of the tiffvisitor.cpp file in Exiv2 version 0.26. A remote attacker can exploit...

DEBIAN-CVE-2017-11683

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

visit-x.de XSS vulnerability

Vulnerable URL: https://www.visit-x.de/CAMS/DE/Verzeichnis1.html?camsearch=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3D%22y%22+onerror%3Dalert%28%2Fopenbugbounty%2F%29%3E=CamSearch Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:31 GMT Vulnerabili...

visit-pontevedra.com XSS vulnerability

Vulnerable URL: http://www.visit-pontevedra.com/esp/8/5/buscador.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3243440 VIP website status:| No Check visit-pontevedra.com SSL...

Visit IRAN (Tourism) - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Visit IRAN Tourism published at the 'play' market has multiple vulnerabilities...

Visit Ajman - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Visit Ajman published at the 'play' market has multiple vulnerabilities...

visitouterhebrides.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.visitouterhebrides.co.uk/engine/referrer.asp?web=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 785564 VIP website status:| No Check...

visitplymouth.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.visitplymouth.co.uk/engine/referrer.asp?web=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 668706 VIP website status:| No Check...

visitlaunceston.co.uk vulnerability

Vulnerable URL: http://www.visitlaunceston.co.uk/engine/referrer.asp?web=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 20.12.2015 Latest check for patch:| 20.12.2015 11:32 GMT Vulnerability status:| Publicly disclosed Alexa Rank| 3301627 Google Pagerank| 3 VIP...