lexon-design.com XSS vulnerability

Open Bug Bounty ID: OBB-58229 Description| Value ---|--- Affected Website:| lexon-design.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Threat Outbreak Alert RuleID14609: Email Messages Distributing Malicious Software on April 28, 2015

Medium Alert ID: 38347 First Published: 2015 April 13 12:26 GMT Last Updated: 2015 April 29 12:38 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14609 and...

Threat Outbreak Alert RuleID14548: Email Messages Distributing Malicious Software on April 23, 2015

Medium Alert ID: 38345 First Published: 2015 April 13 12:26 GMT Last Updated: 2015 April 24 12:35 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14548 and...

Threat Outbreak Alert RuleID14559: Email Messages Distributing Malicious Software on April 13, 2015

Medium Alert ID: 38344 First Published: 2015 April 13 12:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14559 may contain the following files: Name | Si...

search.sify.com XSS vulnerability

Open Bug Bounty ID: OBB-57754 Description| Value ---|--- Affected Website:| search.sify.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Apple OSX/iOS/Windows Safari Non-HTTPOnly Cookie Theft

A vulnerability exists in versions of OSX, iOS, and Windows Safari released before April 8, 2015 that allows the non-HTTPOnly cookies of any domain to be stolen. Module Options msf use auxiliary/gather/apple/safariftpurlcookietheft msf undefinedsafariftpurlcookietheft show actions ...actions... m...

Threat Outbreak Alert RuleID14516: Email Messages Distributing Malicious Software on April 9, 2015

Medium Alert ID: 38240 First Published: 2015 April 7 13:07 GMT Last Updated: 2015 April 9 13:28 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14516 and...

Threat Outbreak Alert RuleID14483: Email Messages Distributing Malicious Software on April 6, 2015

Medium Alert ID: 38219 First Published: 2015 April 3 18:16 GMT Last Updated: 2015 April 6 14:58 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14483 and...

legacysite.regis.edu XSS vulnerability

Open Bug Bounty ID: OBB-57383 Description| Value ---|--- Affected Website:| legacysite.regis.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Threat Outbreak Alert RuleID14465: Email Messages Distributing Malicious Software on April 2, 2015

Medium Alert ID: 38200 First Published: 2015 April 2 20:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14465 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID14332: Email Messages Distributing Malicious Software on April 2, 2015

Medium Alert ID: 38103 First Published: 2015 March 30 13:44 GMT Last Updated: 2015 April 2 13:11 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14332 and...

Cisco Small Business SPA300 and SPA500 Series IP Phones Unauthenticated Remote Dial Vulnerability

A vulnerability in the firmware of the Cisco Small Business SPA 300 and 500 series IP phones could allow an unauthenticated, remote attacker to listen to the audio stream of an IP phone. The vulnerability is due to improper authentication settings in the default configuration. An attacker could...

CVE-2015-1427

creationtimestamp| type| source ---|---|--- 2015-03-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36337 2015-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36415 2017-07-11 02:04:41+00:00| published-proof-of-concept| https://t.me/HackingPublicoficial/162...

IBM Domino 9.0.x < 9.0.1 Fix Pack 2 Multiple Vulnerabilities (credentialed check) (POODLE)

The version of IBM Domino formerly Lotus Domino installed on the remote host is 9.0.x prior to 9.0.1 Fix Pack 2 FP2. It is, therefore, affected by the following vulnerabilities : - An unspecified error exists related to the TLS implementation and the IBM HTTP server that could allow certain error...

IBM Domino 9.x < 9.0.1 Fix Pack 2 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino application on the remote host is 9.x prior to 9.0.1 Fix Pack 2 FP2. It is, therefore, affected by the following vulnerabilities : - An unspecified error exists related to the TLS implementation and the IBM HTTP server that could...

VMSA-2014-0008 : VMware vSphere product updates to third-party libraries

a. vCenter Server Apache Struts Update The Apache Struts library is updated to address a security issue. This issue may lead to remote code execution after authentication. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the identifier CVE-2014-0114 to this issue. b...

Oracle Access Manager Unspecified Vulnerability (credentialed check, April 2014 CPU)

Binary data oracleaccessmanagercve20142404win.nbin...

Joomla Component News Portal com_news Local File Inclusion Vulnerability

No description provided by source. ================================================================================================================= o Joomla Component News Portal Local File Inclusion Vulnerability Software : comnewsportal version 1.5.x Vendor : http://www.ijoomla.com/ Author :...

Joomla Component Ticketbook Local File Inclusion Vulnerability

No description provided by source. ================================================================================================================ o Joomla Component Ticketbook Local File Inclusion Vulnerability Software : comticketbook version 1.0.1 Vendor : http://www.demo-page.de/ Author :...

Joomla Component MMS Blog com_mmsblog Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================= o Joomla Component MMS Blog Local File Inclusion Vulnerability Software : commmsblog version 2.3.0 Vendor : http://mms.pipp.no/ Author : AntiSecurity No...