Ubiquiti Inc.: Directory traversal at https://nightly.ubnt.com

From within the http request function of the Acunetix and IronWasp programs I was able to view the passwd and hosts files at https://nightly.ubnt.com. Please see the attached screenshots for proof. I have tried to reproduce from within firefox and internet explorer without much luck however if yo...

leinsterexpress.ie XSS vulnerability

Vulnerable URL: http://www.leinsterexpress.ie/archivio.jsp?idsezione=282=datapubblicazione,false"-confirmOPENBUGBOUNTY-"=1=year==Offaly%20Sport Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

online.americanexpress.com XSS vulnerability

Vulnerable URL: https://online.americanexpress.com/myca/logon/us/action/LogLogoffHandler?requesttype=LogLogoffHandler=enUS=iNavLogOutButton=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 29.05.2017 Latest check for patch:| 29.05.2017 12:15 GMT...

jobs.americanexpress.com XSS vulnerability

Vulnerable URL: https://jobs.americanexpress.com/apply/17005969'-confirm'OPENBUGBOUNTY'-'/login/ Details: Description| Value ---|--- Patched:| Yes, at 29.05.2017 Latest check for patch:| 29.05.2017 12:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

online.americanexpress.com XSS vulnerability

Vulnerable URL: https://online.americanexpress.com/myca/logon/us/action/LogLogoffHandler?requesttype=LogLogoffHandler=enUS=iNavLogOutButton=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 29.05.2017 Latest check for patch:| 29.05.2017 12:14 GMT...

Cisco CallManager Express Unauthorized Access Vulnerability (cisco-sa-20170503-cme1)

A vulnerability in Cisco IOS Software for Cisco CallManager Express CME could allow an unauthenticated, remote attacker to make unauthorized phone calls. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Threat Outbreak Alert RuleID29017: Email Messages Distributing Malicious Software on May 8, 2017

Medium Alert ID: 53755 First Published: 2017 May 8 19:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29017 may contain the following files: Name | Size ...

Cisco IOS Software Unauthorized Access Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in Cisco IOS 15.53M Software in Cisco CallManager Express CME devices that stems from a configuration restriction in the toll-fraud protections...

Design/Logic Flaw

A vulnerability in Cisco IOS 15.53M Software for Cisco CallManager Express CME could allow an unauthenticated, remote attacker to make unauthorized phone calls. The vulnerability is due to a configuration restriction in the toll-fraud protections component of the affected software. An attacker...

CVE-2017-6624

A vulnerability in Cisco IOS 15.53M Software for Cisco CallManager Express CME could allow an unauthenticated, remote attacker to make unauthorized phone calls. The vulnerability is due to a configuration restriction in the toll-fraud protections component of the affected software. An attacker...

CVE-2017-6624

A vulnerability in Cisco IOS 15.53M Software for Cisco CallManager Express CME could allow an unauthenticated, remote attacker to make unauthorized phone calls. The vulnerability is due to a configuration restriction in the toll-fraud protections component of the affected software. An attacker...

CVE-2017-6624

A vulnerability in Cisco IOS 15.53M Software for Cisco CallManager Express CME could allow an unauthenticated, remote attacker to make unauthorized phone calls. The vulnerability is due to a configuration restriction in the toll-fraud protections component of the affected software. An attacker...

CVE-2017-6624

CVE-2017-6624 affects Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME). The issue stems from a configuration restriction in the toll-fraud protections component, allowing an unauthenticated, remote attacker to place unauthorized long-distance calls via an affected system. Connected...

Cisco CallManager Express Unauthorized Access Vulnerability

A vulnerability in Cisco IOS Software for Cisco CallManager Express CME could allow an unauthenticated, remote attacker to make unauthorized phone calls. The vulnerability is due to a configuration restriction in the toll-fraud protections component of the affected software. An attacker could...

Cisco Aironet 1800, 2800, and 3800 Series Access Points Plug-and-Play Arbitrary Code Execution Vulnerability

A vulnerability in the Plug-and-Play PnP subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point AP or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is...

The magic of Content-Type to: all versions of the IE browser there is a 0day vulnerability-vulnerability warning-the black bar safety net

We believe that this loophole one day in the future will certainly give you great help. Note that this vulnerability will affect all versions of IE in Win7, And Win8. 1 and Win10 on a test, but MicrosoftEdge not affected by this vulnerability. ! Vulnerability overview The server sends the respons...

sport-express.ru XSS vulnerability

Vulnerable URL: http://www.sport-express.ru/search// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3106 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Valu...

americanexpress.com XSS vulnerability

Vulnerable URL: https://www.americanexpress.com/sg/leavecountry.shtml?url=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 444 VIP website status:| Yes Check americanexpress.com SSL...

byinvitationonlyphotos.americanexpress.com XSS vulnerability

Vulnerable URL: http://byinvitationonlyphotos.americanexpress.com/photo.php?p="onmouseover=alert%28/OPENBUGBOUNTY/%29 x=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

www262.americanexpress.com XSS vulnerability

Vulnerable URL: https://www262.americanexpress.com/dapply/web/uifieldcomponents/tncContainer.jsp?tncUrl=https://www.americanexpress.com/" Details: Description| Value ---|--- Patched:| Yes, at 12.04.2017 Latest check for patch:| 12.04.2017 07:10 GMT Vulnerability type:| XSS Vulnerability status:|...