Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update C)

CVSS v3 6.8 Vendor: Siemens Equipment: SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products Vulnerabilities: Security Features UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-17-318-01B Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products that was...

Bad Rabbit Ransomware Uses Leaked 'EternalRomance' NSA Exploit to Spread

A new widespread ransomware worm, known as "Bad Rabbit," that hit over 200 major organisations, primarily in Russia and Ukraine this week leverages a stolen NSA exploit released by the Shadow Brokers this April to spread across victims' networks. Earlier it was reported that this week's...

PT-2017-14038

Name of the Vulnerable Software and Affected Versions E-Sic version 1.0 Description A SQL Injection issue exists via the f parameter to the "esiclivre/restrito/inc/buscacep.php" script, which is used for zip code search. Recommendations For E-Sic version 1.0, consider restricting access to the...

CVE-2017-15381: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in E-Sic 1.0 via the f parameter to esiclivre/restrito/inc/buscacep.php aka the zip code search script...

bulat.ru XSS vulnerability

Vulnerable URL: http://bulat.ru/forma/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2318490 VIP website status:| No Check bulat.ru SSL connection:| Grade: F Coordinated Disclosure Timeline: Description| Value...

newview-tattoosupply.com XSS vulnerability

Vulnerable URL: http://www.newview-tattoosupply.com/products.html?keywords=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

drevistas.ucv.cl XSS vulnerability

Vulnerable URL: http://drevistas.ucv.cl/detallesnumero.php?tituloID=132=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

parentesis.com XSS vulnerability

Vulnerable URL: http://www.parentesis.com/noticias/Entretenimiento/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 49213 VIP website status:| Yes Check parentesis.com SSL...

gogolistings.com XSS vulnerability

Vulnerable URL: http://www.gogolistings.com//?cityid=1〈=en="=50=ads Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 989552 VIP website status:| No Check gogolistings.com SSL...

etp.com.br XSS vulnerability

Vulnerable URL: http://www.etp.com.br/en/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

habitos.be Open Redirect vulnerability

Vulnerable URL: http://www.habitos.be/counterKC.aspx?iid=192=7=www.openbugbounty.org/\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1599374 VIP website status:| No Che...

artesur.eu XSS vulnerability

Vulnerable URL: http://www.artesur.eu/Tarifa/exposicion/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

e-gen.or.kr XSS vulnerability

Vulnerable URL: http://www.e-gen.or.kr/egen/searching.do?searchKeyword=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E\n Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 350792 VIP website status:| No...

hotelscomparison3.co.uk XSS vulnerability

Vulnerable URL: http://www.hotelscomparison3.co.uk/hotelsearchlaunch.php?userSessionId=3dcf76bacfcabab3c9bfd6ad7e04b0b7=2 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3288609 VIP website status:| No Check...

firsteleven.com XSS vulnerability

Vulnerable URL: http://firsteleven.com/?s=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 52750 VIP website status:| No Check firsteleven.com SSL connection:| Grade: F Coordinated...

zimthaus.ch XSS vulnerability

Vulnerable URL: http://www.zimthaus.ch/tagproducts.php/fr?idtag=Keritzy%22%3EKeirtzy%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

cif-bennes.com XSS vulnerability

Vulnerable URL:...

sokoban.org XSS vulnerability

Vulnerable URL: http://sokoban.org/level.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16088511 VIP website status:| No Check sokoban.org SSL connection:| Grade: F...

mpm.fr XSS vulnerability

Vulnerable URL: http://www.mpm.fr/produit.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5892644 VIP website status:| No Check mpm.fr SSL connection:| Grade: F...

cuevascastellon.uji.es XSS vulnerability

Vulnerable URL: http://www.cuevascastellon.uji.es/ES6D01.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check cuevascastellon.uji.es SSL connection:|...