trade-a-plane.com XSS vulnerability

Open Bug Bounty ID: OBB-378788 Description| Value ---|--- Affected Website:| trade-a-plane.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CloudBees Poll SCM Plugin Cross-Site Request Forgery Vulnerability

CloudBees Poll SCM Plugin is the United States CloudBees company Jenkins Java-based development of continuous integration tools in a timed execution plugin . The CloudBees Poll SCM Plugin suffers from a cross-site request forgery vulnerability that stems from the program failing to require a POST...

Tizen Studio 1.3 Smart Development Bridge Buffer Overflow

Exploit Title: Smart Development Bridge =2.3.2 part of Tizen Studio 1.3 Windows x86/x64 - Buffer Overflow PoC Date: 22.10.17 Exploit Author: Marcin Kopec Vendor Homepage: https://developer.tizen.org/ Software Link: https://developer.tizen.org/development/tizen-studio/download Version: 2.3.0, 2.3....

Rockwell Automation Stratix 5100 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.9 ATTENTION: Exploitable remotely/public exploits are available Vendor: Rockwell Automation Equipment: Stratix 5100 Wireless Access Point/Workgroup Bridge Vulnerability: Reusing a Nonce 2. UPDATE INFORMATION This updated advisory is a follow-up to the original...

How To Catch a Cheater

You have observed your partner and noticed some significant changes in behavior. They are more secretive about using their phone; they are working late or on the weekend; or they are not connecting with you like they used to. Do you have a cheater in the house? How can you find out? There are som...

Exposure of Sensitive Information to an Unauthorized Actor

A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts...

Fedora 25 : dnsmasq (2017-515264ae24)

CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 CVE-2017-14496 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

a-nagarim.co.il XSS vulnerability

Open Bug Bounty ID: OBB-360748 Description| Value ---|--- Affected Website:| a-nagarim.co.il Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Unspecified Vulnerability in Apple iOS Security

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Security is an information security and privacy component. An unspecified vulnerability exists in the Security component of Apple iOS prior to version 11. The vulnerability can be exploited by an attacker to tra...

checkout.na3.netsuite.com XSS vulnerability

Vulnerable URL: https://checkout.na3.netsuite.com/app/site/query/getcustomermessage.nl/c.1029593/n.1/.f?=Welcome+to+IS+Custom+Uniforms%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS...

agedcarereviews.com.au XSS vulnerability

Vulnerable URL: http://agedcarereviews.com.au/searchresult.php?sort=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1567522...

musl libc buffer overflow vulnerability

musl libc is the new standard library for a new generation of Linux-based devices. A buffer overflow vulnerability exists in musl libc prior to version 1.1.17. The vulnerability arises because dnsparsecallback in network/lookupname.c does not limit the number of addresses, and an attacker can cau...

CVE-2017-15650

musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dnsparsecallback in network/lookupname.c does not restrict the number of addresses, and thus an attacker can provide an unexpected number by sending A records in a reply to an AAAA query...

askfsis.custhelp.com XSS vulnerability

Vulnerable URL: http://askfsis.custhelp.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Public...

planetajoy.com XSS vulnerability

Vulnerable URL: http://www.planetajoy.com/index.php?page=buscar=ral429%22%3E%3Cinput%20autofocus%20onfocus=alert%28/OPENBUGBOUNTY/%29%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

PT-2017-4088 · Musl +2 · Musl Libc +2

Name of the Vulnerable Software and Affected Versions: musl libc versions prior to 1.1.17 Description: The issue is related to a buffer overflow in the dns parse callback function in network/lookup name.c, which does not restrict the number of addresses. This allows an attacker to provide an...

ICSA-17-306-01 Siemens SIMATIC PCS 7 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 4.9 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC PCS 7 Vulnerabilities: Improper Input Validation 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-17-306-01 Siemens SIMATIC...

joebrowns.co.uk XSS vulnerability

Vulnerable URL: https://www.joebrowns.co.uk/product+t+%3Cimg%20src%3Dx%20onerror%3Dprompt%28/OPENBUGBOUNTY/%29%3E?searchterm=%3Cimg%20src%3Dx%20onerror%3Dprompt%28/OPENBUGBOUNTY/%29%3E\n Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

torrco.com XSS vulnerability

Vulnerable URL:...

Krebs Given ISSA’s ‘President’s Award’

KrebsOnSecurity was honored this month with the 2017 President's Award for Public Service from the Information Systems Security Association, a nonprofit organization for cybersecurity professionals. The award recognizes an individual's contribution to the information security profession in the ar...