CVE-2015-1993

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session...

deakin.edu.au XSS vulnerability

Vulnerable URL: https://www.deakin.edu.au/password/change/ Details: Description| Value ---|--- Patched:| Yes, at 10.11.2015 Latest check for patch:| 10.11.2015 23:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21888 Google Pagerank| 8 VIP website status:| Ye...

CVE-2015-1999: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...

CVE-2015-1993: Undefined Security Weakness

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session...

gettyimages.it XSS vulnerability

Vulnerable URL: http://www.gettyimages.it/video/scriptscriptalertxssposedscript?collections=imbr,imbl=false=creative=1=%3C%2Fscript%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E=best Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:3...

lesplatsdusoleil.fr XSS vulnerability

Vulnerable URL: http://www.lesplatsdusoleil.fr//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1...

cd.edb.gov.hk XSS vulnerability

Vulnerable URL: https://cd.edb.gov.hk/la03/chi/teachresouce/clipartcollection/TPSsearch.htm?keywords=%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E∧=0 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:28 GMT Vulnerability type...

Ubiquiti Networks Hardcoded Keys / Remote Management

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Insecure default configuration product: various Ubiquiti Networks products vulnerable version: see Vulnerable / tested versions fixed version: none available impact: High...

XcodeGhost Malware Supports iOS9

New samples of XcodeGhost, malware targeting iOS devices, have surfaced beyond the borders of China with new support for iOS9 and obfuscation techniques making it that much harder to detect. iOS9 is only a few weeks old and included new security measures that allowed for only secure HTTPS...

ip-https-discover NSE Script

Checks if the IP over HTTPS IP-HTTPS Tunneling Protocol 1 is supported. IP-HTTPS sends Teredo related IPv6 packets over an IPv4-based HTTPS session. This indicates that Microsoft DirectAccess 2, which allows remote clients to access intranet resources on a domain basis, is supported. Windows...

isolana.es XSS vulnerability

Vulnerable URL: http://www.isolana.es/es/accesoclientes.php?d=1="'; Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 671373 Google Pagerank| 2 VIP website...

ratemyjob.com XSS vulnerability

Vulnerable URL: http://www.ratemyjob.com/article/search/%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E.html Details: Description| Value ---|--- Patched:| Yes, at 23.11.2015 Latest check for patch:| 23.11.2015 17:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

isimtescil.net XSS vulnerability

Vulnerable URL: https://www.isimtescil.net/SSLDetay.aspx?ssl=1=1=1;alert/XSSPOSED/; Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3998 Google Pagerank| 6...

girlsinlove.xxx XSS vulnerability

Vulnerable URL: http://girlsinlove.xxx/login.php Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3480342 Google Pagerank| 0 VIP website status:| No Check...

ethnixtours.com XSS vulnerability

Vulnerable URL: http://www.ethnixtours.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18468151 Google Pagerank| 2 VIP website status:...

ZIB - The Open Tor Botnet

General information and instructions. The Open Tor Botnet requires the installation and configuration of bitcoind, however I neglect to detail this here out of a lack of time. This bot-net is fully undetectable and bypasses all antivirus through running on top of Python27's pyinstaller, which is...

Design/Logic Flaw

http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service HTTPS call hang via unspecified vectors...

CVE-2015-5262

CVE-2015-5262 affects Apache HttpComponents HttpClient prior to 4.3.6 where the http.socket.timeout setting is ignored during SSL handshakes, enabling potential DoS via HTTPS call hangs. IBM-connected docs reference this CVE in IBM StreamSets Data Collector 6.4.0 with a fixed release path, noting...

CVE-2015-5262

http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service HTTPS call hang via unspecified vectors...

CVE-2015-5262: Undefined Security Weakness

http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service HTTPS call hang via unspecified vectors...