winter-ski.ru XSS vulnerability

Vulnerable URL: http://www.winter-ski.ru/catalog/?search='"onfocus=alert/XSSposed/ autofocus= Details: Description| Value ---|--- Patched:| Yes, at 24.03.2017 Latest check for patch:| 24.03.2017 19:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Students Built Open Source Web-Based Threat Modeling Tool

Threat models help application developers answer some fundamental questions about potential risks and how to cut off vulnerabilities before they’re put into production. Some software development lifecycles, however, don’t include threat modeling as part of the code-building process because they’v...

eDirectory 8.7.3 iMonitor Remote Stack Buffer Overflow

No description provided by source. $Id: edirectoryimonitor.rb 9812 2010-07-13 22:11:40Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

IA WebMail 3.x - (iaregdll.dll version 1.0.0.5) Remote Exploit

No description provided by source. !/usr/bin/perl -w IA WebMail 3.x iaregdll.dll version 1.0.0.5 Remote Exploit Application Specific Shellcode: URL Downloader - www elitehaven net/ncat.exe downloaded - c:\nc.exe created By Peter Winter-Smith peter4020 hotmail com Shellcode included - will need...

New IE Zero Day Found Targeting Military Intelligence

Attackers were able to compromise the U.S. Veterans of Foreign Wars’ website this week and serve up a previously unknown zero day exploit in Internet Explorer 10, and while motivation behind the campaign is still unclear, experts are speculating its aim was to procure military intelligence...

Malicious Russian Tor Exit Relays Intercepting encrypted Traffic of Facebook Users

Tor is one of the best and freely available privacy software that lets people communicate anonymously online through a series of nodes that is designed to provide anonymity for users and bypass Internet censorship. When you use the Tor software, your IP address remains hidden and it appears that...

Winter Olympic Search Results Exploited by Malware

Cybercriminals have been capitalizing on the world’s interest in the Winter Olympics in Vancouver to spread malware, experts warned. Attackers have been using Twitter and black hat search engine SEO optimization tactics to promote fake Olympics videos that are spreading malware. Read the full...

Novell eDirectory 8.7.3 - iMonitor Remote Stack Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Web Crossing 4.x/5.x Denial of Service Vulnerability

Web Crossing 4.x/5.x Denial of Service Vulnerability Credit: Author : Peter Winter-Smith Software: Package : Web Crossing Versions : 4.x/5.x Vendor : WebCrossing, Inc. Vendor Url : http://www.webcrossing.com/ Vulnerability: Bug Type : Denial of Service Severity : Less Critical 1. Description of...

RapidCache Multiple Vulnerabilities

RapidCache Multiple Vulnerabilities Credit: Author : Peter Winter-Smith Software: Packages : RapidCache Versions : 2.2.6 and below Vendor : Vicomsoft Vendor Url : http://www.vicomsoft.com/rapidcache/rapidcache.main.html Vulnerability: Bug Type : Denial of Service; Directory Traversal Severity :...

netobserve.txt

NetObserve Security Bypass Vulnerability Credit: Author : Peter Winter-Smith Software: Packages : NetObserve Version : 2.0 and prior Vendor : ExploreAnywhere Software Vendor Url : http://www.exploreanywhere.com/no-intro.php Vulnerability: Bug Type : Security Bypass Severity : Highly Critical +...

NetObserve Security Bypass Vulnerability

NetObserve Security Bypass Vulnerability Credit: Author : Peter Winter-Smith Software: Packages : NetObserve Version : 2.0 and prior Vendor : ExploreAnywhere Software Vendor Url : http://www.exploreanywhere.com/no-intro.php Vulnerability: Bug Type : Security Bypass Severity : Highly Critical +...

projectforum.txt

ProjectForum Multiple Vulnerabilities Credit: Author : Peter Winter-Smith Software : ProjectForum Versions : Version 8.4.2.1 and below Vendor : Equi4 Software Vendor Url : http://www.projectforum.com/projectforum/ Vulnerability: Bug Type : Denial of Service; Cross Site Scripting Severity : Less...

eZphotoshare Multiple Overflow Vulnerabilities

eZphotoshare Multiple Overflow Vulnerabilities Credit: Author : Peter Winter-Smith Software: Package : eZphotoshare Versions : All up to and including the latest verson Vendor : eZnetwork Vendor Url : http://www.ezphotoshare.com/ Vulnerability: Bug Type : Multiple Interesting Overflows Severity :...

eZphotoshare Multiple Overflow Vulnerabilities

eZphotoshare Multiple Overflow Vulnerabilities Credit: Author : Peter Winter-Smith Software: Package : eZphotoshare Versions : All up to and including the latest verson Vendor : eZnetwork Vendor Url : http://www.ezphotoshare.com/ Vulnerability: Bug Type : Multiple Interesting Overflows Severity :...

IA WebMail Server 3.x Buffer Overflow Vulnerability

IA WebMail Server 3.x Buffer Overflow Vulnerability Credit: Author : Peter Winter-Smith Software: Package : IA WebMail Server Versions : All up to and including 3.1 Vendor : True North Software Vendor Url : http://www.tnsoft.com Vulnerability: Bug Type : Stack-based Buffer Overflow Severity :...