sanjuanito-meta.gov.co XSS vulnerability

Open Bug Bounty ID: OBB-247036 Description| Value ---|--- Affected Website:| sanjuanito-meta.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID29345: Email Messages Distributing Malicious Software on May 31, 2017

Medium Alert ID: 54001 First Published: 2017 May 31 17:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29345 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29289: Email Messages Distributing Malicious Software on May 26, 2017

Medium Alert ID: 53978 First Published: 2017 May 26 13:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29289 may contain the following files: Name | Size...

JVN#42164352: GroupSession fails to restrict access permissions

GroupSession provided by Japan Total System Co.,Ltd. is open source groupware. GroupSession fails to restrict access permissions. Impact An authenticated attacker may obtain other user's senisitive information such as email. Solution Update the Software Update to the latest version according to t...

Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: Dahua Technology Co., Ltd Equipment: Digital Video Recorders and IP Cameras Vulnerabilities: Use of Password Hash Instead of Password for Authentication, Password in Configuration File...

JVN#82019695: ASSETBASE vulnerable to cross-site scripting

ASSETBASE provided by UCHIDA YOKO CO., LTD. is an IT asset management tool. ASSETBASE contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of a user who logged-in as an administrator. Solution Update the Software Update to the latest...

eberhard-co-watches.ch XSS vulnerability

Vulnerable URL: http://www.eberhard-co-watches.ch/?s=%22%3Eblub%3CsvG%2Fonload%3Dalert%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1282324 VIP website...

S2-046 and S2-045 Remote Code Execution Vulnerabilities in AVCON6 System Management Platform of Huaping Information Technology Co.

Huaping Information Technology Co., Ltd. is a multimedia communication system and smart city solution provider. S2-046 and S2-045 remote code execution vulnerabilities exist in the AVCON6 system management platform of Huaping Information Technology Co. It allows an attacker to remotely execute...

JVN#82619692: Access CX App fails to verify SSL server certificates

Access CX App provided by NISSAN SECURITIES CO., LTD. fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Application Update to the latest version according to the information provided by...

Updated audacious-plugins packages fix security vulnerability

Chris Evans discovered that incorrect emulation of the SPC700 audio co-processor of the Super Nintendo Entertainment System allows the execution of arbitrary code if a malformed SPC music file is opened CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961. These issues were...

co-optimus.com XSS vulnerability

Vulnerable URL: http://www.co-optimus.com/games.php?id=1=DESC=%3E%3D=2==%25=Y&game-title-filter;==1=1zqjzzx" Details: Description| Value ---|--- Patched:| Yes, at 10.02.2017 Latest check for patch:| 10.02.2017 17:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Man In The Middle (MitM)

co-cli-installer is vulnerable to man-in-the-middle MitM attacks because it downloads the co-cli module as part of the install process over HTTP. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on th...

fmdmp3.co XSS vulnerability

Vulnerable URL: http://fmdmp3.co/z'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 124629 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug...

Updated game-music-emu packages fix security vulnerabilities

Chris Evans discovered that incorrect emulation of the SPC700 audio co-processor of the Super Nintendo Entertainment System allows the execution of arbitrary code if a malformed SPC music file is opened CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961...

MGASA-2016-0428 Updated game-music-emu packages fix security vulnerabilities

Chris Evans discovered that incorrect emulation of the SPC700 audio co-processor of the Super Nintendo Entertainment System allows the execution of arbitrary code if a malformed SPC music file is opened CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961...

Siemens APOGEE Insight Incorrect File Permissions Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-082-01 Siemens APOGEE Insight Incorrect File Permissions Vulnerability that was published March 22, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 3 -------- Siemens has identified an...

OpenSSL: Side channel attack on modular exponentiation

A side-channel attack was found that makes use of cache-bank conflicts on the Intel Sandy-Bridge microarchitecture. An attacker who has the ability to control code in a thread running on the same hyper-threaded core as the victim's thread that is performing decryption, could use this flaw to...

DSA-3735-1 game-music-emu - security update

Bulletin has no description...

Peplink NGxxx/LCxxx VPN-Firewall Open Redirect

Peplink NGxxx/LCxxx VPN-Firewall Open Redirect Vulnerability Vendor: Qingdao Xunbo Information Technology Co., Ltd. Product web page: http://www.peplink.net Affected version: PEPLINK NG300 VPN-Firewall PEPLINK NG320-VPN-Firewall PEPLINK NG500-VPN-Firewall PEPLINK NG520-VPN-Firewall PEPLINK...

Backdoor Found in Firmware of Some Android Devices

Nearly three million Android devices are vulnerable to an attack that could allow a hacker to compromise over-the-air OTA updates to the devices and allow adversaries to remotely execute commands with root privileges. The problem stems from what researchers call an insecure implementation of an O...