Regular Expression Denial Of Service (ReDoS)

moment is vulnerable to denial of service DoS attacks. These attacks are possible because the regular expression that is used for matching dates takes awhile for long strings...

zalaand.af XSS vulnerability

Vulnerable URL: http://zalaand.af/fullstory.php?id=53850%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 465894 VIP website status:| No Coordinated Disclosure...

dodax.co.uk XSS vulnerability

Vulnerable URL: https://www.dodax.co.uk/search/?i=%20=test%27;%20alert%27OPENBUGBOUNTY%27;%20var%20xss%20=%20%27a Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1160978 VIP website...

Regular Expression Denial of Service

Overview Affected versions of moment are vulnerable to a low severity regular expression denial of service when parsing dates as strings. Recommendation Update to version 2.19.3 or later. References - Issue 4163 - PR 4326 - GitHub Advisory...

Protecting Confidential Data: You May Not Be as Secure as You Think

Part One of a Three Part Series Unless you have been out of the country or otherwise shunning the news, you have likely heard that on September 7th and again on September 15th, Equifax reported that it suffered a security incident from May 13th through July 30th, 2017. This breach is broad reachi...

eastswallaroos.com.au XSS vulnerability

Vulnerable URL: http://www.eastswallaroos.com.au/html/includes/showImage.asp?imageName=xss"\r\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

curso-ingles.com XSS vulnerability

Open Bug Bounty ID: OBB-293039 Description| Value ---|--- Affected Website:| curso-ingles.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

louwman.nl XSS vulnerability

Open Bug Bounty ID: OBB-292420 Description| Value ---|--- Affected Website:| louwman.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Equifax Says Breach Affects 143 Million Americans

Equifax, one of the three largest consumer credit reporting agencies in the United States, disclosed Thursday afternoon it’s looking into a data breach that may have affected upwards to 143 million Americans. The company said in a statement on its site that cybercriminals managed to exploit an...

classicofny.com XSS vulnerability

Open Bug Bounty ID: OBB-280402 Description| Value ---|--- Affected Website:| classicofny.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

140.128.103.234 XSS vulnerability

Vulnerable URL: http://140.128.103.234/BSWebone.do?searchinput=4"'--!field=EXH Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Fedora 26 : php-horde-nag (2017-d1c86c61f2)

nag 4.2.15 - jan SECURITY: Fix open redirects. - mjr Fix handling of delayed start dates Bug 14634. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much a...

Fedora 25 : php-horde-nag (2017-34d34904f5)

nag 4.2.15 - jan SECURITY: Fix open redirects. - mjr Fix handling of delayed start dates Bug 14634. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much a...

CVE-2017-12477

creationtimestamp| type| source ---|---|--- 2017-08-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42957 2017-10-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43031 2018-05-29 15:50:33+00:00| seen|...

Sonicwall Secure Remote Access 8.1.0.2-14sv - Command Injection

Sonicwall Secure Remote Access SRA - Command Injection Vulnerabilities Vendor: Sonicwall Dell Product: Secure Remote Access SRA Version: 8.1.0.2-14sv Platform: Embedded Linux Discovery: Russell Sanford of Critical Start www.CriticalStart.com CVE: cve-2016-9682 Tested against version 8.1.0.2-14sv ...

CVE-2017-1000366

creationtimestamp| type| source ---|---|--- 2017-06-19 17:25:22+00:00| published-proof-of-concept| https://t.me/SysadminNotes/179 2017-06-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42276 2017-06-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42275...

CVE-2017-7615

creationtimestamp| type| source ---|---|--- 2017-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41890 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/mantisbtpasswordreset.rb 2021-02-05 21:43:47+00:00|...

Analysis of the EQGRP leakage

As you know, yesterday TheShadowBrokers group released EQGRP archive with some interesting data inside. As they mentioned, it’s a NSA leakage with a lot of “cyberweapon”. I analysed this data yesterday to find the answers to following questions: 1. When did the leak occur? 2. Who were the targets...

literaturtipps.de XSS vulnerability

Vulnerable URL: http://www.literaturtipps.de/suchergebnisse/?txbookonlinepi1%5Bsword%5D=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=9=12 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:|...

CVE-2016-6277

creationtimestamp| type| source ---|---|--- 2016-12-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40889 2017-03-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41598 2018-05-24 15:44:33+00:00| seen| MISP/5b06d57d-f2b8-4357-9038-45d39f590eb0 2018-05-29...