CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

CVE-2016-1770

The CVE-2016-1770 issue affects the Reminders component in OS X El Capitan prior to 10.11.4. Root cause: a tel: URL triggering a dialing action without user confirmation due to insufficient entitlement checks. Impact: ability to trigger a call without prompting the user. Mitigation: Apple release...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

See how I withdraw your QQ message, not fix-bug warning-the black bar safety net

0x01 Specific ideas: In with the PC end of windows chat, First you need to put the QQ chat friends window using colorful bubbles off, Then you send each other a message,right click your message, There will be a withdraw option,don't worry. point, Waiting for the other to send a message to come ov...

Threat Outbreak Alert RuleID21778: Email Messages Distributing Malicious Software on March 17, 2016

Medium Alert ID: 44180 First Published: 2016 March 18 18:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21778 may contain the following files: Name | Si...

New Relic: no email confirmation on signup

the email confirmation is not taken anyone can make newrelic account from any email address...

wondershare.de XSS vulnerability

Vulnerable URL: http://wondershare.de/servers/public/index.php?c=product= Details: Description| Value ---|--- Patched:| Yes, at 16.08.2016 Latest check for patch:| 16.08.2016 10:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 61169 Google Pagerank| 4 VIP...

Threat Outbreak Alert RuleID21459: Email Messages Distributing Malicious Software on March 10, 2016

Medium Alert ID: 44049 First Published: 2016 March 10 22:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21459KVR may contain the following files: Name |...

New Relic: CSRF - Regenerate all admin api keys

Hi The request to regenerate all admin api keys is a GET request without CSRF protection. As such, you can regenerate someone's keys using csrf. While not too big of an issue the admin can always see the keys and use them its certainly annoying and can cause business disruption. Additionally, a...

Legal Robot: Rate limiting on Email confirmation link

Security researcher discovered a potential issue where no rate limiting was applied to sensitive functions, like email reconfirmation links...

lutherie-france.com XSS vulnerability

Vulnerable URL: http://www.lutherie-france.com/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

heisthelife.com XSS vulnerability

Vulnerable URL: http://www.heisthelife.com/pops/Video.asp?VideoName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

dh.miraeis.com XSS vulnerability

Vulnerable URL: http://dh.miraeis.com/gameZone.asp?gameName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

prdaily.com Open Redirect vulnerability

Vulnerable URL: http://www.prdaily.com/Click.aspx?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 43103 Google Pagerank| 0 VIP website status:|...

jerseyfinder.com Open Redirect vulnerability

Vulnerable URL: http://www.jerseyfinder.com/transfer.asp?linkid=557=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Goog...

times-footballclub.com XSS vulnerability

Vulnerable URL: http://www.times-footballclub.com/teammemberinfoimg.php?teamname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Threat Outbreak Alert RuleID20378: Email Messages Distributing Malicious Software on May 4, 2016

Medium Alert ID: 42959 First Published: 2016 January 8 20:53 GMT Last Updated: 2016 May 5 12:52 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20378 and...

Tor to Launch Bug Bounty Program in 2016

The Tor Project announced last week that it will launch a bug bounty program later this year to encourage security researchers to responsibly report issues they find in the software. Tor Browser and Tor Performance Developer Mike Perry announced the news during the “State of the Onion” address la...

Chamilo LCMS Connect 4.1 Cross Site Scripting

Affected Vendor: http://lcms.chamilo.org/ Date: 27/03/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Stored XSS Tested on: Windows 7 Product: LCMS Connect Version: 4.1 Description: Chamilo is an open-source under GNU/GPL licensing e-learning and content management system, aimed ...

lolewomen.com XSS vulnerability

Vulnerable URL: http://www.lolewomen.com/es/en/catalogsearch/result/?q=%22--%3E+%3C%2Fscript%3E%3Csvg%2Fonload%3D%27%3Balert%28%2FXSSPOSED%2F%29%3B%27%3E=article Details: Description| Value ---|--- Patched:| Yes, at 05.04.2017 Latest check for patch:| 05.04.2017 11:47 GMT Vulnerability type:| XSS...