bats.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-204492 Description| Value ---|--- Affected Website:| bats.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Bitcoin Price Jumps Above $1150 — Highest in last 3 Years

What a good start of the New Year for those holding Bitcoins! Web-based digital currency Bitcoin has passed $1,110 for the first time on the Bitstamp Price Index BPI since early November 2013. Bitcoin broke the barrier on 1 January and now is trading above $1,150 mark at the time of writing,...

aquascapesofconnecticut.com XSS vulnerability

Open Bug Bounty ID: OBB-201809 Description| Value ---|--- Affected Website:| aquascapesofconnecticut.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

the-dispatch.com XSS vulnerability

Open Bug Bounty ID: OBB-200001 Description| Value ---|--- Affected Website:| the-dispatch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-7262

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka "Microsoft Office Security Feature...

BELL-CVE-2016-7942 CVE-2016-7942 does not affect BellSoft software

Bulletin has no description...

Command Execution Vulnerability in Call Center System Year Parameter of Tibus Communications

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. A command execution vulnerability exists in the year parameter of the Setset Time Communication Call Center System. The vulnerability file: /sysmaint/settime.php allows...

Wordpress new-year-firework plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language, which supports the setting up of personal blog sites on servers with PHP and MySQL. new-year-firework is one of the plug-ins for creating new campaigns. A cross-site scripting vulnerabilit...

CVE-2016-1000140

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

Cross site scripting

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

CVE-2016-1000140

The CVE-2016-1000140 entry concerns the WordPress plugin New Year Firework, affected

CVE-2016-1000140

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

CVE-2016-1000140: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin new-year-firework v1.1.9...

PT-2016-4532

Name of the Vulnerable Software and Affected Versions wordpress plugin new-year-firework version 1.1.9 Description The issue is related to a Reflected XSS in the wordpress plugin new-year-firework. Recommendations For version 1.1.9, update to a newer version that contains a fix for this issue...

Contenido v4.9.11 - (Backend) Multiple XSS Vulnerabilities

Document Title: =============== Contenido v4.9.11 - Backend Multiple XSS Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1928 Release Date: ============= 2016-10-10 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2016-2177

creationtimestamp| type| source ---|---|--- 2016-09-20 12:28:47+00:00| seen| https://t.me/bugbountychannel/178...

CVE-2016-6936

creationtimestamp| type| source ---|---|--- 2016-09-15 20:29:14+00:00| seen| https://t.me/FullDisclosure/68...

FBI Arrests Two Hackers Who Hacked US Spy Chief, FBI and CIA Director

US authorities have arrested two North Carolina men on charges that they were part of the notorious hacking group "Crackas With Attitude." Crackas with Attitude is the group of hackers who allegedly was behind a series of audacious and embarrassing hacks that targeted personal email accounts of...

CVE-2016-3437

creationtimestamp| type| source ---|---|--- 2016-08-30 17:57:34+00:00| seen| https://t.me/FullDisclosure/25...

CVE-2016-3831

The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device crash via a NITZ time value of 2038-01-19 or later that is mishandled by the system clock, aka internal bug 29083635,...