Three of My Books Are Available in DRM-Free E-Book Format

Humble Bundle sells groups of e-books at ridiculously low prices, DRM free. This month, the bundles are all Wiley titles, including three of my books: Applied Cryptography, Secrets and Lies, and Cryptography Engineering. $15 gets you everything, and they're all DRM-free. Even better, a portion of...

Schneider Electric Patches XML Vulnerability In Software

Schneider Electric on Tuesday issued fixes for a vulnerability in its SoMachine Basic software, which could result in the disclosure and retrieval of arbitrary data. The software in question is used to develop code for programmable logic controllers. Attackers can leverage a vulnerability within...

CVE-2017-17485

FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper,...

Cisco Registered Envelope Service Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient...

roche-applied-science.com XSS vulnerability

Open Bug Bounty ID: OBB-411093 Description| Value ---|--- Affected Website:| roche-applied-science.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

Logitech Media Server 7.9.0 Cross Site Scripting

Exploit Title: Logitech Media Server : Persistent Cross Site ScriptingXSS Shodan Dork: Search Logitech Media Server Date: 11/03/2017 Exploit Author: Dewank Pant Vendor Homepage: www.logitech.com Software Link: download link if available Version: 7.9.0 Tested on: Windows 10, Linux CVE : Applied Fo...

Logitech Media Server 7.9.0 - Radio URL Cross-Site Scripting Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Logitech Media Server : HTML code injection and execution. Shodan Dork: Search Logitech Media Server Date: 11/03/2017 Exploit Author: Dewank Pant Vendor Homepage: www.logitech.com Version: 7.9.0 Tested on: Windows 10, Linux...

Logitech Media Server 7.9.0 - favorites Cross-Site Scripting

Logitech Media Server 7.9.0 - favorites Cross-Site Scripting Exploit Title: Logitech Media Server : Persistent Cross Site ScriptingXSS Shodan Dork: Search Logitech Media Server Date: 11/03/2017 Exploit Author: Dewank Pant Vendor Homepage: www.logitech.com Software Link: download link if available...

Logitech Media Server 7.9.0 - 'favorites' Cross-Site Scripting

Exploit Title: Logitech Media Server : Persistent Cross Site ScriptingXSS Shodan Dork: Search Logitech Media Server Date: 11/03/2017 Exploit Author: Dewank Pant Vendor Homepage: www.logitech.com Software Link: download link if available Version: 7.9.0 Tested on: Windows 10, Linux CVE : Applied Fo...

artesur.eu XSS vulnerability

Vulnerable URL: http://www.artesur.eu/Tarifa/exposicion/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

kvvm.gov.hu XSS vulnerability

Vulnerable URL: http://www.kvvm.gov.hu/index.php?lang=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

majstro.com XSS vulnerability

Vulnerable URL: http://www.majstro.com/Web/Majstro/home.php?gebrTaal=%27%22/%3E%3C/script%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

fmshk.com.hk XSS vulnerability

Vulnerable URL: http://www.fmshk.com.hk/fmshk.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8192651 VIP website status:| No Coordinated Disclosure Timeline: Descriptio...

halledesprix.fr XSS vulnerability

Vulnerable URL: http://www.halledesprix.fr/s/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 577767 VIP website status:| No Check halledesprix.fr SSL connection:| Grade: B+...

eventi-omniarelations.com Open Redirect vulnerability

Vulnerable URL: http://www.eventi-omniarelations.com/Newsletters/Redirect.aspx?idnewsletter=idnewsletter=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alex...

microtek.com XSS vulnerability

Vulnerable URL: http://www.microtek.com/products.php?KindID=1%22%3E%3Cscript%3Ealert/XSSPOSED/%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 464712 VIP website...

haizol.com XSS vulnerability

Vulnerable URL: https://www.haizol.com/?lang=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 53409 VIP website status:| No Coordinated...

bteye.org XSS vulnerability

Vulnerable URL: http://www.bteye.org/?lang=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25182 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|-...

didier-beurre.fr XSS vulnerability

Vulnerable URL: http://www.didier-beurre.fr/blog/index.php?m=08=13=16=entry130816-133525=13'"15 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8424538 VIP website status:| No...

fcsdl.com Open Redirect vulnerability

Vulnerable URL: http://www.fcsdl.com/redirect/?url=data%3Atext%2Fhtml%3Bbase64%2CPHNjcmlwdD5hbGVydCgvT1BFTkJVR0JPVU5UWS8pPC9zY3JpcHQ%2B Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...