CVE-2017-15944

creationtimestamp| type| source ---|---|--- 2017-12-13 09:00:49+00:00| seen| https://t.me/canyoupwnme/2863 2017-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43342 2018-05-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44597 2018-05-29 15:50:33+00:00| see...

Security Updates for Internet Explorer (April 2017)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a...

api-jobsearch.livecareer.com XSS vulnerability

Open Bug Bounty ID: OBB-385767 Description| Value ---|--- Affected Website:| api-jobsearch.livecareer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CentOS 7 before 1708 PIE/stack corruption Vulnerability

Exploit for linux platform in category remote exploits Linux PIE/stack corruption CVE-2017-1000253 ======================================================================== Contents ======================================================================== Summary Analysis Exploitation Acknowledgmen...

CVE-2017-1000253

Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 committed on April 14, 2015. This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 backported to Linux 3.10.7...

CVE-2017-1000253

Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 committed on April 14, 2015. This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 backported to Linux 3.10.7...

17-years-old kid hacks US air force for the good

By Uzair Amir In April 2017, it was reported that the US Department of Defence This is a post from HackRead.com Read the original post: 17-years-old kid hacks US air force for the good...

Network outage and performance degradation after you install WMF 5.1 in Windows Server 2012 R2

Network outage and performance degradation after you install WMF 5.1 in Windows Server 2012 R2 Symptoms Assume that you use a Hyper-V Network Virtualization HNV Gateway with Routing and Remote Access Service RRAS clusters on a Windows Server 2012 R2-based server. After you install Windows...

InsomniaX 2.1.8 Arbitrary Kernel Extension Loading Vulnerability

It was found that the loader application bundled with InsomniaX can be used to load arbitrary Kernel Extensions kext. The loader is normally used to load a kext file that is needed to disable the Lid Sleep. A flaw has been found in the loader that allows a local attacker to load or unload any...

Oracle PeopleSoft - Server-Side Request Forgery Vulnerability

Exploit for java platform in category web applications Application: Oracle PeopleSoft Versions Affected: ToolsRelease: 8.55.03; ToolsReleaseDB: 8.55; PeopleSoft HCM 9.2 Vendor URL: http://oracle.com Bugs: SSRF Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017...

Oracle PeopleSoft HCM 9.2 XXE Injection

Application: Oracle PeopleSoft Versions Affected: PeopleSoft HCM 9.2 on PeopleTools 8.55 Vendor URL: http://oracle.com Bug: XXE Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Author: Nadya Krivdyuk ERPScan Description 1...

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue...

Update for the .NET Framework 4.5.2 on Windows 7, Windows Server 2008 R2, and Windows Server 2008 (KB4020507): May 2, 2017

Update for the .NET Framework 4.5.2 on Windows 7, Windows Server 2008 R2, and Windows Server 2008 KB4020507: May 2, 2017 View products that this article applies to. Introduction This update for the .NET Framework 4.5.2 on Windows 7, Windows Server 2008 R2, and Windows Server 2008 provides a fix t...

bportal.staedteregion-aachen.de XSS vulnerability

Vulnerable URL: https://bportal.staedteregion-aachen.de/login?ppid=1WARsracsucheportletplifecycle=0pstate=maximizedpmode=view Details: Description| Value ---|--- Patched:| Yes, at 04.05.2017 Latest check for patch:| 04.05.2017 07:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

vspy.guildlaunch.net XSS vulnerability

Vulnerable URL: http://vspy.guildlaunch.net/srv/vspy.php?Address=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=6176 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

crossroadsma.org XSS vulnerability

Open Bug Bounty ID: OBB-229203 Description| Value ---|--- Affected Website:| crossroadsma.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

librosylibros.co XSS vulnerability

Vulnerable URL:...

vii.guildlaunch.com XSS vulnerability

Vulnerable URL: http://vii.guildlaunch.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

architegn.dk XSS vulnerability

Vulnerable URL: http://architegn.dk/search.asp?searchfield=CEBRA%22%27--!%3E%3CScript%20/K/%3EconfirmOPENBUGBOUNTY%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

rentolease.co.uk XSS vulnerability

Vulnerable URL: http://www.rentolease.co.uk/BlogView.asp?SearchPhrase=BUY+TO+LET+ARLA+2014+Ayrshire+property+market%22%27--!%3E%3CScript%20/K/%3Econfirm%22OPENBUGBOUNTY%22%3C/Script%20/K/%3E==123074==6 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...