CVE-2017-10860

Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 JST allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory...

kmartens.home.xs4all.nl XSS vulnerability

Open Bug Bounty ID: OBB-293438 Description| Value ---|--- Affected Website:| kmartens.home.xs4all.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

norika.com.sg XSS vulnerability

Open Bug Bounty ID: OBB-292963 Description| Value ---|--- Affected Website:| norika.com.sg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

husmanntschaeni.com XSS vulnerability

Open Bug Bounty ID: OBB-291271 Description| Value ---|--- Affected Website:| husmanntschaeni.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Remote Support Tool Untrusted Search Path Vulnerability

Remote Support Tool Enkaku Support Tool is an Enkaku support tool from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan. An untrustworthy search path vulnerability exists in versions of Remote Support Tool prior to August 10, 2017 . An attacker can exploit this vulnerability to gain privileges with the...

mediatop.online XSS vulnerability

Open Bug Bounty ID: OBB-285652 Description| Value ---|--- Affected Website:| mediatop.online Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

August 2017 Preview of the Quality Rollups for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows Server 2012: August 15, 2017

August 2017 Preview of the Quality Rollups for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows Server 2012: August 15, 2017 View products that this article applies to. Summary This article lists the Quality Rollups for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and...

August 2017 Preview of the Quality Rollups for the .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1: August 15, 2017

August 2017 Preview of the Quality Rollups for the .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1: August 15, 2017 View products that this article applies to. Summary This article lists the Quality Rollups for the .NET Framework 3.5.1,...

werkstatt-betrieb.de XSS vulnerability

Vulnerable URL: https://www.werkstatt-betrieb.de/search?search.text=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E=suchen=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerabilit...

CVE-2017-12717

An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.220170817. A maliciously crafted dll file placed earlier in the search path may allow an attacker to execute code within the context of the application...

Threat Outbreak Alert RuleID30433: Email Messages Distributing Malicious Software on August 30, 2017

Medium Alert ID: 54987 First Published: 2017 August 30 18:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30433 may contain the following files: Name |...

addoil.com XSS vulnerability

Vulnerable URL: http://www.addoil.com/search/%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 167753 VIP website status:| No...

CVE-2017-15084

creationtimestamp| type| source ---|---|--- 2017-08-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42961...

sk.fashionnetwork.com XSS vulnerability

Vulnerable URL: http://sk.fashionnetwork.com/search/?p0=rootbyte Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

datasheetcatalog.biz Open Redirect vulnerability

Vulnerable URL: http://datasheetcatalog.biz/url.php?url=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 916458 VIP website status:| No Coordinated...

wickedlocal.com XSS vulnerability

Open Bug Bounty ID: OBB-283536 Description| Value ---|--- Affected Website:| wickedlocal.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

автокресла.рф Open Redirect vulnerability

Vulnerable URL: http://автокресла.рф/redirect.php?site=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 798670 VIP website status:| No Coordinated...

infa-education.ru Open Redirect vulnerability

Vulnerable URL: https://infa-education.ru/redirect.php?site=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 6295394 VIP website status:| No...

Threat Outbreak Alert RuleID30370: Email Messages Distributing Malicious Software on August 28, 2017

Medium Alert ID: 54966 First Published: 2017 August 28 16:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30370 may contain the following files: Name |...

tudocelular.com XSS vulnerability

Vulnerable URL: https://www.tudocelular.com/newfiles/adserver/adsensepanorama.php?adslot=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...