epson.de XSS vulnerability

Vulnerable URL: https://www.epson.de/viewcon/corporatesite/misc/warrantycheck?countrycode=DE=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dy+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 02.06.2017 Latest check for patch:| 02.06.2017 19:42 GMT...

oks-germany.com XSS vulnerability

Open Bug Bounty ID: OBB-222642 Description| Value ---|--- Affected Website:| oks-germany.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

akaipro.com XSS vulnerability

Vulnerable URL: http://akaipro.com/find-a-dealer?address=%27%22--%3E%3C/style%3E%3C/scRipt%3E%3CscRipt%3Ealert%27OPENBUGBOUNTY%27%3C/scRipt%3E=Germany=25 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:30 GMT Vulnerability type:| XSS...

VIPA Controls WinPLC7

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: VIPA Controls Equipment: WinPLC7 Vulnerability: Stack Buffer Overflow AFFECTED PRODUCTS The following versions of WinPLC7, a PLC programming software, are affected: WinPLC Versions 5.0.45.5921 and prior. IMPACT...

Elefant CMS 1.3.12-RC Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Elefant CMS 1.3.12-RC Fixed in: 1.3.13 Fixed Version https://github.com/jbroadway/elefant/releases/tag/ Link: elefant1313rc Vendor Website: https://www.elefantcms.com/ Vulnerability CSRF Type: Remote Yes Exploitable:...

Geutebrück IP Cameras

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Geutebrück Equipment: IP Cameras Vulnerabilities: Authentication Bypass and Improper Neutralization of Special Elements AFFECTED PRODUCTS The following Geutebrück G-Cam IP camera version is affected: G-Cam/EFD-2250...

germany.hermes.com XSS vulnerability

Vulnerable URL:...

oks-germany.com XSS vulnerability

Vulnerable URL: https://www.oks-germany.com/ecomaXL/index.php?url=en/products/oils-detail/168/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2551582 VIP website status:| No Check...

PHOENIX CONTACT mGuard

CVSS V3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: PHOENIX CONTACT Equipment: mGuard Vulnerability: Software update changes password to default AFFECTED PRODUCTS PHOENIX CONTACT reports that the vulnerability affects the following mGuard products: Only devices that hav...

wordpress plugin Germany-likes-opt-in-facebook cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin Germany-likes-opt-in-facebook suffers from an xss vulnerability due to improper filtering of user input,...

Router high-risk vulnerabilities induced the German telecommunications ultra 90 million users suffered network disruption-vulnerability warning-the black bar safety net

! Event overview Last weekend millions of German Internet users suffered a series of network outages, investigate its reason is a failure of the home routers hijacked. Deutsche Telekom's 2000 million users with 90 million users received the interrupt effect from the last Sunday continues to prese...

store.hp.com XSS vulnerability

Vulnerable URL: http://store.hp.com/GermanyStore/Merch/Product.aspx?id=D3Q16B=A81=PRN=cpr163id/de/de/ips/iito/pagewidepro/shopnow&6'/ Details: Description| Value ---|--- Patched:| Yes, at 22.05.2017 Latest check for patch:| 22.05.2017 14:55 GMT Vulnerability type:| XSS Vulnerability status:|...

On the Yahoo Breach, WhatsApp-Facebook, and Zerodium's $1.5M Bounty

Mike Mimoso and Chris Brook discuss the news of the week, including the latest on the Yahoo breach, Germany’s problem with WhatsApp-Facebook, Facebook osquery tool for Windows, and Zerodium’s $1.5M iOS bounty. Download: ThreatpostNewsWrapSeptember302016.mp3 Music by Chris Gonsalves...

Germany Bans Facebook From Collecting WhatsApp Data

Just last month, the most popular messaging app WhatsApp updated its privacy policy and T&Cs to start sharing its user data with its parent company, and now both the companies are in trouble, at least in Germany and India. Both Facebook, as well as WhatsApp, have been told to immediately stop...

ZineBasic 1.1 - Arbitrary File Disclosure Exploit

Exploit for php platform in category web applications Title: ZineBasic 1.1 Remote File Disclosure Exploit Author: bd0rk || East Germany former GDR Tested on: Ubuntu-Linux Vendor: http://w2scripts.com/news-publishing/ Download:...

Record-breaking 1.9 Gbps Internet Speed achieved over 4G Mobile Connection

Elisa, one of the biggest Finnish Internet Service Providers ISP, claims to have achieved a new world record for 4G network with 1.9 gigabit-per-second Gbps data download speed using Huawei technology. Currently, Sweden and the United Kingdom have been crowned as the top countries across the worl...

mytzadik.biz XSS vulnerability

Open Bug Bounty ID: OBB-171676 Description| Value ---|--- Affected Website:| mytzadik.biz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Scan Reveals Hydropower Plants, Other Critical Infrastructure Exposed Online

An Internet scan of the IPv4 address space uncovered more than 100 critical facilities exposed to the public Internet, including hydropower plants in Germany and Italy, and a smart building in Israel hosting luxury apartments. The investigation, conducted by researchers at Internet Wache of Berli...

Volkswagen Service Germany - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Volkswagen Service Germany published at the 'play' market has multiple vulnerabilities...

Core Tor Developer who accuses FBI of Harassment moves to Germany

One of TOR's primary software developers, Isis Agora Lovecruft, has fled to Germany, following the threat of a federal subpoena. Lovecruft is a well-known cryptographer and lead software developer for Tor project from many years. She has worked for a variety of other security and encryption...