September 7, 2017 – Morning Cyber Coffee Headlines – “NFL Kickoff” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! September 7, 2017 - Headlines Carbon Black in the News: Milton Security Announc...

philamundi.eu XSS vulnerability

Vulnerable URL: https://www.philamundi.eu/search.asp?lang=xss%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=bc=433 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Joomla Bargain Product VM3 1.0 Component - product_id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Bargain Product VM3 1.0 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://www.weborange.eu/ Software Link: https://www.weborange.eu/extensions/index.php/extensions-vm3/bargain-product-vm3-deta...

docs.whirlpool.eu XSS vulnerability

Vulnerable URL: http://docs.whirlpool.eu/default.cfm?CampoRicerca=%22/%3E%27%3E%22%3EI%3Ci%3EI%3Csvg/onload=alert/openbugbounty/%3ERicercaCode==12NC=1=KA=de Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/eurostat/statistics-explained/index.php/R&Dexpenditure/%22-confirm%60OPENBUGBOUNTY%60-%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

WebKitGTK 2.1.2 (Ubuntu 14.04) - Heap based Buffer Overflow

WebKitGTK 2.1.2 Ubuntu 14.04 - Heap based Buffer Overflow CVE-2014-1303 PoC for Linux CVE-2014-1303 WebKit Heap based BOF proof of concept for Linux. This repository demonstrates the WebKit heap based buffer overflow vulnerability CVE-2014-1303 on Linux. NOTE: Original exploit is written for Mac ...

Countdown to GDPR: IT Policy Compliance

From the first page, the EU’s General Data Protection Regulation stresses the importance it places on the security and privacy of EU residents’ private information. The 88-page document opens by referring to the protection of this personal data as a “fundamental right” essential for “freedom,...

demo.koha-ptfs.eu Open Redirect vulnerability

Vulnerable URL: https://demo.koha-ptfs.eu/cgi-bin/koha/tracklinks.pl?uri=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Countdown to GDPR: Manage Vulnerabilities

If your organization needs a compelling reason for establishing or enhancing its vulnerability management program, circle this date in bold, red ink on your corporate calendar: May 25, 2018. On that day, the EU's General Data Protection Regulation GDPR goes into effect, intensifying the need for...

eshre2017.eu XSS vulnerability

Open Bug Bounty ID: OBB-262538 Description| Value ---|--- Affected Website:| eshre2017.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ns303565.ip-94-23-206.eu XSS vulnerability

Vulnerable URL: http://ns303565.ip-94-23-206.eu/index.php?page=agenda%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=alert'OPENBUGBOUNTY'%20//%3E%3CSvg%3E=33 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.08.2017 Vulnerability type:| XSS...

switzerland123.eu Open Redirect vulnerability

Open Bug Bounty ID: OBB-255397 Description| Value ---|--- Affected Website:| switzerland123.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Countdown to GDPR: Get 20/20 Visibility Into Your IT Assets

Anyone questioning the importance of IT asset visibility in an organization’s security and compliance postures ought to review the EU’s General Data Protection Regulation GDPR, which goes into effect next year. With the severe requirements the GDPR places on how a business handles the personal da...

Google Gets Record-Breaking $2.7 Billion Fine for Manipulating Search Results

Google has just lost its biggest regulatory battle! Google has been hit with a record-breaking $2.7 billion €2.42 billion fine by the European antitrust officials for unfairly manipulating search results since 2008. After a lengthy seven-year investigation that was launched in 2010 after several...

New EU Privacy Laws Will Complicate B2B Data Sharing

NEW YORK – United States companies doing business abroad are grumbling over new European privacy laws set to take effect in less than one year. The EU privacy rules are far more stringent than U.S. laws, and are meant to give consumers the upper hand when it comes to controlling what data is stor...

Countdown to GDPR — Reduce your Risk

First discussed in the 1990s and turned into law last year, the EU’s General Data Protection Regulation GDPR finally goes into effect in May 2018, imposing strict requirements on millions of businesses and subjecting violators to severe penalties. The complex regulation is of concern not just to...

helo24.eu XSS vulnerability

Open Bug Bounty ID: OBB-247819 Description| Value ---|--- Affected Website:| helo24.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

airbagbank.eu XSS vulnerability

Vulnerable URL: https://www.airbagbank.eu/de/products/%3E'%3E%22%3Et%3Ci%3Ep%3Cimg%20src%3Dx%20onerror%3Dprompt'openbugbounty'%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/eurostat/statistics-explained/index.php/R&Dexpenditure/"-confirmOPENBUGBOUNTY-" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

cube.anker.eu XSS vulnerability

Vulnerable URL: https://cube.anker.eu/de Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check cube.anker.eu SSL connection:| Grade:...