Hackers caught using CNET website to spread nasty malware

By Sudais Asif Yet another attempt by hackers to drop malware through CNET's download section that leaves a question mark on whether to download anything from CNET? This is a post from HackRead.com Read the original post: Hackers caught using CNET website to spread nasty malware...

japan.cnet.com XSS vulnerability

Vulnerable URL: https://japan.cnet.com/minis%3C!'/!%22/!/'//%22/--!%3E%3CInput/Autofocus/%0D/Onfocus=confirm%60OPENBUGBOUNTY%60//%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

cnet.se XSS vulnerability

Vulnerable URL: http://www.cnet.se/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8072938 VIP...