jQuery cross-site scripting vulnerability (CNVD-2018-02374)

jQuery is an American programmer John Resig developed a set of open source , cross-browser JavaScript library . The library simplifies the operation between HTML and JavaScript , and has a modular , plug-in extensions and other features . A cross-site scripting vulnerability exists in versions of...

CVE-2018-6009

In Yii Framework 2.x prior to 2.0.14, the switchIdentity() function in yii\web\User.php did not regenerate the CSRF token on identity changes, potentially allowing CSRF token mismatch after login state changes. Public advisories confirm this Cross‑Site Request Forgery risk. remediation: upgrade t...

Threat Outbreak Alert RuleID31781: Email Messages Distributing Malicious Software on January 22, 2018

Medium Alert ID: 56512 First Published: 2018 January 22 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31781 may contain the following files: Name |...

andertons.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-533710 Description| Value ---|--- Affected Website:| andertons.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID31786: Email Messages Distributing Malicious Software on January 19, 2018

Medium Alert ID: 56506 First Published: 2018 January 19 20:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31786 may contain the following files: Name |...

Threat Outbreak Alert RuleID31785: Email Messages Distributing Malicious Software on January 19, 2018

Medium Alert ID: 56504 First Published: 2018 January 19 17:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31785 may contain the following files: Name |...

Threat Outbreak Alert RuleID31784: Email Messages Distributing Malicious Software on January 19, 2018

Medium Alert ID: 56503 First Published: 2018 January 19 17:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31784 may contain the following files: Name |...

Threat Outbreak Alert RuleID31782: Email Messages Distributing Malicious Software on January 19, 2018

Medium Alert ID: 56502 First Published: 2018 January 19 17:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31782 may contain the following files: Name |...

Threat Outbreak Alert RuleID31767: Email Messages Distributing Malicious Software on January 19, 2018

Medium Alert ID: 56501 First Published: 2018 January 19 17:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31767 may contain the following files: Name |...

Threat Outbreak Alert RuleID31726: Email Messages Distributing Malicious Software on January 19, 2018

Medium Alert ID: 56500 First Published: 2018 January 19 17:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31726 may contain the following files: Name |...

roche-bobois.com XSS vulnerability

Open Bug Bounty ID: OBB-532112 Description| Value ---|--- Affected Website:| roche-bobois.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2018-02369)

Cisco Web Security Appliance WSA is a set of Web security appliances from Cisco USA. The appliance provides SaaS-based access control, real-time network reporting and tracking, and the development of security policies. A cross-site scripting vulnerability exists in the web-based management...

Threat Outbreak Alert RuleID31780: Email Messages Distributing Malicious Software on January 18, 2018

Medium Alert ID: 56495 First Published: 2018 January 18 18:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31780 may contain the following files: Name |...

Threat Outbreak Alert RuleID31778: Email Messages Distributing Malicious Software on January 18, 2018

Medium Alert ID: 56494 First Published: 2018 January 18 18:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31778 may contain the following files: Name |...

Threat Outbreak Alert RuleID31757: Email Messages Distributing Malicious Software on January 18, 2018

Medium Alert ID: 56492 First Published: 2018 January 18 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31757 may contain the following files: Name |...

CVE-2018-0093

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2018-0093

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Web Security Dog (Apache Edition) V4.0 suffers from SQL Injection Vulnerability

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition V4.0 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability...

Threat Outbreak Alert RuleID31760: Email Messages Distributing Malicious Software on January 17, 2018

Medium Alert ID: 56489 First Published: 2018 January 17 18:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31760 may contain the following files: Name |...