Cloud hosting firm Blackbaud pays ransom after thwarting ransomware attack

By Deeba Ahmed Blackbaud claims it paid a ransom to protect customer data. This is a post from HackRead.com Read the original post: Cloud hosting firm Blackbaud pays ransom after thwarting ransomware attack...

@blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1), @blackbaud/skyux-builder (>=1.10.1, <=1.31.0) +72 more potentially affected by CVE-2018-3721 via lodash.mergewith (>=4.0.3, <=4.6.0)

lodash.mergewith NPM version =4.0.3, =1.10.0, =1.10.1, =5.0.0, =5.2.8, =5.0.0, =5.0.0, =5.1.1, =1.3.0, =1.0.0-alpha.1, =1.0.4, =1.1.3, =1.0.0-alpha.4, =1.1.11, =1.0.3, =1.0.0-alpha.3, =1.0.0 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHMERGEWITH-174137...

blackbaud.com XSS vulnerability

Vulnerable URL: https://www.blackbaud.com/search/sitesearch.aspx?qt=%20%20%20%20%20%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E%20%20%20%20%20%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E%20%20%20%20%20%3Cscript%20src=https://xssposed.org/1.js%3E Details: Description| Value ---|---...

search.blackbaud.com XSS vulnerability

Vulnerable URL: https://search.blackbaud.com/q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=relevancy Details: Description| Value ---|--- Patched:| Yes, at 06.09.2016 Latest check for patch:| 06.09.2016 18:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...