1637 matches found
Oracle WebCenter Portal RCE (Oct 2021 CPU)
The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the October 2021 Critical Patch Update CPU. It is, therefore, affected by a vulnerability in the Discussion Forums XStream component that is easily exploitable by a remote, low privileged attacker...
Is There Really Such a Thing as a Low-Paid Ransomware Operator?
ARCHIVED STORY Is There Really Such a Thing as a Low-Paid Ransomware Operator? By Thibault Seret · October 18, 2021 Introduction Going by recent headlines you could be forgiven for thinking all ransomware operators are raking in millions of ill-gotten dollars each year from their nefarious...
New BloodyStealer malware steals data from gamers on EA, Epic, Steam
By Waqas The BloodyStealer malware is sold on Russian hacking forums while its capabilities include stealing gaming logs, login credentials, and much more. This is a post from HackRead.com Read the original post: New BloodyStealer malware steals data from gamers on EA, Epic, Steam...
ohioccwforums.org Improper Access Control vulnerability OBB-2149308
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Pro-PRC Influence Campaign Expands to Dozens of Social Media Platforms, Websites, and Forums in at Least Seven Languages, Attempted to Physically Mobilize Protesters in the U.S.
In June 2019, Mandiant Threat Intelligence first reported to customers a pro-People’s Republic of China PRC network of hundreds of inauthentic accounts on Twitter, Facebook, and YouTube, that was at that time primarily focused on discrediting pro-democracy protests in Hong Kong. Since then, the...
Cybercriminals Selling Access to Compromised Networks: 3 Surprising Research Findings
Cybercriminals are innovative, always finding ways to adapt to new circumstances and opportunities. The proof of this can be seen in the rise of a certain variety of activity on the dark web: the sale of access to compromised networks. This type of dark web activity has existed for decades, but i...
Top CVEs Trending with Cybercriminals
Criminal small talk in underground forums offer critical clues about which known Common Vulnerabilities and Exposures CVEs threat actors are most focused on. This, in turn, offers defenders clues on what to watch out for. An analysis of such chatter, by Cognyte, examined 15 cybercrime forums...
CVE-2010-4266
It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher...
CVE-2010-4264
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side...
Cross site scripting
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side...
Code injection
It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher...
CVE-2010-4266
CVE-2010-4266 affects Vanilla Forums prior to 2.0.10, with a dispatcher-related issue described as a potential linkbait vulnerability in the software. The available connected documents corroborate the affected product (Vanilla Forums) and version boundary (before 2.0.10). No explicit root-cause o...
CVE-2010-4266
It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher...
CVE-2010-4264
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side...
CVE-2010-4264
Vulnerability: CVE-2010-4264 affects Vanilla Forums prior to 2.0.10, where a filename could contain arbitrary code that executes in the client (XSS). Affected product/versions: Vanilla Forums before 2.0.10. Root cause: filename-controlled input enabling client-side script execution. Impact: cross...
PT-2021-8340
Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.10 Description A cross-site scripting issue was discovered where a filename could contain arbitrary code to execute on the client side. Recommendations For versions prior to 2.0.10, update to version 2.0.10...
CVE-2010-4266: URL Redirection to Untrusted Site
It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher...
CVE-2010-4264: Improper Neutralization of Input During Web Page Generation
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side...
vanilla forums 输入验证错误漏洞
Vanilla Forums is a PHP-based open source forum program from Canadian company Vanilla Forums. A security vulnerability exists in versions of vanilla forums prior to 2.0.10 that stems from a potential link bait...
Vanilla Forums 跨站脚本漏洞
Vanilla Forums is a PHP-based open source forum program from Canadian company Vanilla Forums. A cross-site scripting vulnerability exists in versions of vanilla forums prior to 2.0.10, which stems from a filename that may contain arbitrary code to be executed on the client side...