node.js -- Data Confidentiality/Integrity Vulnerability, December 2017

Node.js reports: Data Confidentiality/Integrity Vulnerability - CVE-2017-15896 Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSLread due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the...

CVE-2017-17584

creationtimestamp| type| source ---|---|--- 2017-12-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43246...

CVE-2017-17591

creationtimestamp| type| source ---|---|--- 2017-12-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43239...

CVE-2017-17594

creationtimestamp| type| source ---|---|--- 2017-12-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43235...

CVE-2017-17589

creationtimestamp| type| source ---|---|--- 2017-12-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43240...

CVE-2017-17590

creationtimestamp| type| source ---|---|--- 2017-12-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43241...

Threat Outbreak Alert RuleID31563: Email Messages Distributing Malicious Software on December 7, 2017

Medium Alert ID: 56189 First Published: 2017 December 7 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31563 may contain the following files: Name |...

Threat Outbreak Alert RuleID31556: Email Messages Distributing Malicious Software on December 7, 2017

Medium Alert ID: 56188 First Published: 2017 December 7 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31556 may contain the following files: Name |...

Threat Outbreak Alert RuleID31552: Email Messages Distributing Malicious Software on December 7, 2017

Medium Alert ID: 56186 First Published: 2017 December 7 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31552 may contain the following files: Name |...

Threat Outbreak Alert RuleID31544: Email Messages Distributing Malicious Software on December 7, 2017

Medium Alert ID: 56182 First Published: 2017 December 7 20:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31544 may contain the following files: Name |...

Threat Outbreak Alert RuleID31044: Email Messages Distributing Malicious Software on December 7, 2017

Medium Alert ID: 56178 First Published: 2017 December 7 20:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31044 may contain the following files: Name |...

local.com XSS vulnerability

Open Bug Bounty ID: OBB-449680 Description| Value ---|--- Affected Website:| local.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

support.knu.ac.kr XSS vulnerability

Open Bug Bounty ID: OBB-449583 Description| Value ---|--- Affected Website:| support.knu.ac.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2017-16895

creationtimestamp| type| source ---|---|--- 2017-12-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43216...

CVE-2017-16777

creationtimestamp| type| source ---|---|--- 2017-12-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43219...

CVE-2017-12579

creationtimestamp| type| source ---|---|--- 2017-12-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43223...

Threat Outbreak Alert RuleID31535: Email Messages Distributing Malicious Software on December 5, 2017

Medium Alert ID: 56127 First Published: 2017 December 5 13:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31535 may contain the following files: Name |...

CVE-2017-11319

creationtimestamp| type| source ---|---|--- 2017-12-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43210...

casadelpuzzle.com XSS vulnerability

Open Bug Bounty ID: OBB-447930 Description| Value ---|--- Affected Website:| casadelpuzzle.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

imig.ae XSS vulnerability

Open Bug Bounty ID: OBB-447828 Description| Value ---|--- Affected Website:| imig.ae Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...