Horse Market Sell & Rent Portal Script 1.5.7 - Cross-Site Request Forgery Vulnerability

Exploit for linux platform in category web applications Exploit Title: Horse Market Sell & Rent Portal Script 1.5.7 - Cross-Site Request Forgery Date: 2018-05-15 Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/horse-market-sell-rent-portal/14174352?srank=1725 CVE: N/A Version:...

Malicious Package

Overview Version 1.0.1 of simple-alipay contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.1 of this module is found install...

Input validation

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may...

Threat Outbreak Alert RuleID32784: Email Messages Distributing Malicious Software on May 15, 2018

Medium Alert ID: 57897 First Published: 2018 May 15 19:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32784 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32786: Email Messages Distributing Malicious Software on May 15, 2018

Medium Alert ID: 57896 First Published: 2018 May 15 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32786 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32783: Email Messages Distributing Malicious Software on May 14, 2018

Medium Alert ID: 57894 First Published: 2018 May 15 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32783 may contain the following files: Name | Size...

swissbanking-future.ch XSS vulnerability

Open Bug Bounty ID: OBB-616526 Description| Value ---|--- Affected Website:| swissbanking-future.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-11091

CVE-2018-11091 affects MyBiz MyProcureNet 5.0.0. A malicious actor can upload a script by tampering with HiddenFieldControlCustomWhiteListedExtensions, adding an allowed extension (e.g., .asp) so files like secctest.asp are accepted. This enables arbitrary command execution on the webserver and p...

Threat Outbreak Alert RuleID32779: Email Messages Distributing Malicious Software on May 14, 2018

Medium Alert ID: 57890 First Published: 2018 May 14 13:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32779 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32782: Email Messages Distributing Malicious Software on May 14, 2018

Medium Alert ID: 57888 First Published: 2018 May 14 13:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32782 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32780: Email Messages Distributing Malicious Software on May 14, 2018

Medium Alert ID: 57889 First Published: 2018 May 14 13:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32780 may contain the following files: Name | Size...

Drupal H5P Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Services is one of the modules that allows users to programmatically create customized Web service items. A cross-site scripting attack vulnerability exists in the Drupal H5P module,...

ee.qwertygame.com XSS vulnerability

Open Bug Bounty ID: OBB-616163 Description| Value ---|--- Affected Website:| ee.qwertygame.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lemessurier.com XSS vulnerability

Open Bug Bounty ID: OBB-616157 Description| Value ---|--- Affected Website:| lemessurier.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vd.ch XSS vulnerability

Open Bug Bounty ID: OBB-616087 Description| Value ---|--- Affected Website:| vd.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

excelpropertybulgaria.com XSS vulnerability

Open Bug Bounty ID: OBB-615529 Description| Value ---|--- Affected Website:| excelpropertybulgaria.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-6458

CVE-2018-6458 affects Easy Hosting Control Panel (EHCP) version 0.37.12.b. The connected documents confirm a cross-site request forgery (CSRF) vulnerability due to insufficient CSRF protection. Exploitation could enable a remote attacker to perform unauthorized actions on behalf of authenticated ...

Threat Outbreak Alert RuleID32762: Email Messages Distributing Malicious Software on May 11, 2018

Medium Alert ID: 57877 First Published: 2018 May 11 17:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32762 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32761: Email Messages Distributing Malicious Software on May 11, 2018

Medium Alert ID: 57876 First Published: 2018 May 11 17:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32761 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32760: Email Messages Distributing Malicious Software on May 11, 2018

Medium Alert ID: 57875 First Published: 2018 May 11 17:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32760 may contain the following files: Name | Size...