PT-2018-10673 · Amazon · Alexa +1

Name of the Vulnerable Software and Affected Versions: Amazon Echo devices affected versions not specified Description: The reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill, allowing an attacker to obtain transcripts of speech not intended for Alexa to process. Thi...

igigli.it XSS vulnerability

Open Bug Bounty ID: OBB-612416 Description| Value ---|--- Affected Website:| igigli.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

atom.it XSS vulnerability

Open Bug Bounty ID: OBB-596012 Description| Value ---|--- Affected Website:| atom.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Configuration Backup Files Detected

The scanner has detected publicly accessible WordPress configuration files on the target web application. These files likely contains extremely sensitive server information including administrative database credentials. This may present an attacker with an exploit vector which could be leveraged...

Drupal Configuration Backup Files Detected

The scanner has detected publicly accessible Drupal configuration files on the target web application. These files likely contains extremely sensitive server information including administrative database credentials. This may present an attacker with an exploit vector which could be leveraged usi...

Joomla! Configuration Backup Files Detected

The scanner has detected publicly accessible Joomla! configuration files on the target web application. These files likely contain extremely sensitive server information including administrative database credentials. This may present an attacker with an exploit vector which could be leveraged usi...

WordPress User Registration Form Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible WordPress User Registration Form on the target application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictiona...

WordPress Administration Panel Login Form Detected

WordPress Administration Panel has been detected on the target web application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictionary Attack, allowing an attacker to gain access to administrative functionality. No...

HPE iMC - dbman 'RestartDB' Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HPE iMC dbman RestartDB Unauthenticated RCE', 'Description' = %q This module exploits a remote command execution vulnerablity in Hewlett Packard...

The vulnerability of the altivec_unavailable_exception function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the altivecunavailableexception function arch/powerpc/kernel/traps.c in the Linux operating system is related to errors in data processing on 64-bit operating systems. This occurs when CONFIGALTIVEC is defined, and the processor supports Activec, but its support is not detect...

Oracle Mysql Security Updates (jan2012-366304) 03 - Linux

Oracle MySQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hirschmann Device Detection Consolidation

Consolidation of Hirschmann device detections. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

esmoriztur.pt XSS vulnerability

Open Bug Bounty ID: OBB-450503 Description| Value ---|--- Affected Website:| esmoriztur.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Technologies Detected

This is an informational plugin to inform the user what technologies the framework has detected on the target application, which can then be examined and checked for known vulnerable software versions No source data...

banden.surfsite.nl Open Redirect vulnerability

Open Bug Bounty ID: OBB-404613 Description| Value ---|--- Affected Website:| banden.surfsite.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Threat Outbreak Alert RuleID30975: Email Messages Distributing Malicious Software on October 13, 2017

Medium Alert ID: 55610 First Published: 2017 October 13 16:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30975 may contain the following files: Name |...

gepur.com XSS vulnerability

Open Bug Bounty ID: OBB-273495 Description| Value ---|--- Affected Website:| gepur.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mawaly.com XSS vulnerability

Open Bug Bounty ID: OBB-227883 Description| Value ---|--- Affected Website:| mawaly.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-Site Request Forgery

Cross Site Request Forgery CSRF occurs when an authenticated user is tricked into clicking on a link which would automatically submit a request without the user's consent. This can be made possible when the request does not include an anti-CSRF token, generated each time the request is visited an...

Cookie Without HttpOnly Flag Detected

The HttpOnly flag assists in the prevention of client side-scripts such as JavaScript from accessing and using the cookie. This can help prevent XSS attacks from targeting the cookies holding the client's session token setting the HttpOnly flag does not prevent, nor safeguard against XSS...