Oracle VM VirtualBox 5.1.x < 5.1.36 / 5.2.x < 5.2.10 (April 2018 CPU)

The version of Oracle VM VirtualBox running on the remote host is 5.1.x prior to 5.1.36 or 5.2.x prior to 5.2.10. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additiona...

osCommerce Installer Unauthenticated Code Execution Exploit

If the /install/ directory was not removed, it is possible for an unauthenticated attacker to run the "install4.php" script, which will create the configuration file for the installation. This allows the attacker to inject PHP code into the configuration file and execute it. This module requires...

Design/Logic Flaw

Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federationbase.py and handlers/message.py, as exploited in the wild in April 2018...

CVE-2018-9995

creationtimestamp| type| source ---|---|--- 2018-05-01 19:13:40+00:00| published-proof-of-concept| https://t.me/canyoupwnme/3681 2018-05-11 06:42:49+00:00| published-proof-of-concept| https://t.me/antichat/1427 2018-06-16 19:58:31+00:00| seen| https://t.me/codebysec/1481 2018-10-25 13:37:37+00:00...

Threat Outbreak Alert RuleID32584: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57612 First Published: 2018 April 30 14:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32584 may contain the following files: Name| Siz...

Threat Outbreak Alert RuleID32587: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57610 First Published: 2018 April 30 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32587 may contain the following files: Name| Siz...

Threat Outbreak Alert RuleID32589: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57608 First Published: 2018 April 30 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32589 may contain the following files: Name| Siz...

schueler-talk.de XSS vulnerability

Open Bug Bounty ID: OBB-610327 Description| Value ---|--- Affected Website:| schueler-talk.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-10504

creationtimestamp| type| source ---|---|--- 2018-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44559...

kma29.ru XSS vulnerability

Open Bug Bounty ID: OBB-610241 Description| Value ---|--- Affected Website:| kma29.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

giannahairstyl.com XSS vulnerability

Open Bug Bounty ID: OBB-609665 Description| Value ---|--- Affected Website:| giannahairstyl.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cogsci.bme.hu XSS vulnerability

Open Bug Bounty ID: OBB-609497 Description| Value ---|--- Affected Website:| cogsci.bme.hu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

luybenmusic.com XSS vulnerability

Open Bug Bounty ID: OBB-609319 Description| Value ---|--- Affected Website:| luybenmusic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gabi.lv XSS vulnerability

Open Bug Bounty ID: OBB-609128 Description| Value ---|--- Affected Website:| gabi.lv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID32595: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57601 First Published: 2018 April 26 22:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32595 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32580: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57602 First Published: 2018 April 26 22:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32580 may contain the following files: Name | Si...

mkoe.at XSS vulnerability

Open Bug Bounty ID: OBB-609032 Description| Value ---|--- Affected Website:| mkoe.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID32596: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57600 First Published: 2018 April 26 19:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32596 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32605: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57594 First Published: 2018 April 26 19:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32605 may contain the following files: Name | Si...

muses.is XSS vulnerability

Open Bug Bounty ID: OBB-608924 Description| Value ---|--- Affected Website:| muses.is Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...