7419 matches found
it-frs.net XSS vulnerability
Open Bug Bounty ID: OBB-258567 Description| Value ---|--- Affected Website:| it-frs.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
[SECURITY] Fedora 24 Update: zabbix-3.0.9-1.fc24
Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechan ism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...
qa-archive-it.org XSS vulnerability
Vulnerable URL: https://www.qa-archive-it.org/organizations/318?fc=metaSubject%3AGay+community%22%3Cbody/onpageshow=%22alert%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E%22San+Antonio.=metaPublisher%3AUniversity+of+Texas+at+San+Antonio Details: Description| Value ---|--- Patched:| No Latest che...
it-sji.net XSS vulnerability
Open Bug Bounty ID: OBB-257095 Description| Value ---|--- Affected Website:| it-sji.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
Multiple Vulnerabilities in Hitachi IT Operations Director and JP1/IT Desktop Management
Overview A cross-site scripting and an XML external entity XXE vulnerability have been found in Hitachi IT Operations Director, JP1/IT Desktop Management - Manager and JP1/IT Desktop Management 2 - Manager. Impact An attacker may conduct a cross-site scripting attack and a XML external entity XXE...
Countdown to GDPR: Get 20/20 Visibility Into Your IT Assets
Anyone questioning the importance of IT asset visibility in an organization’s security and compliance postures ought to review the EU’s General Data Protection Regulation GDPR, which goes into effect next year. With the severe requirements the GDPR places on how a business handles the personal da...
novavision-it.com Open Redirect vulnerability
Vulnerable URL: http://novavision-it.com/novavisionseo/redirect.php?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 4122591 VIP website...
Check_MK < 1.4.0p6 webapi.py XSS
The version of CheckMK running on the remote web server is prior to 1.4.0p6. It is, therefore, affected by a reflected cross-site XSS scripting vulnerability in webapi.py due to error messages being interpreted as HTML when they should be plain text. An unauthenticated, remote attacker can exploi...
it-frs.net XSS vulnerability
Vulnerable URL: https://www.it-frs.net/VendorSearch.asp?type=All=C=FRESNO= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3825865 VIP website status:| No Check it-frs.net SSL...
Why So Many Top Hackers Hail from Russia
Conventional wisdom says one reason so many hackers seem to hail from Russia and parts of the former Soviet Union is that these countries have traditionally placed a much greater emphasis than educational institutions in the West on teaching information technology in middle and high schools, and...
falconitservices.com XSS vulnerability
Vulnerable URL: https://www.falconitservices.com/SitePages/Home.aspx?FollowSite=0=%27-confirm%22OPENBUGBOUNTY%22-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3459359 VIP...
Reducing Infrastructure Cost with new Enterprise Application Access Architecture
In an earlier blog, "Remote Access no longer needs to be Complex and Cumbersome", I wrote about the new game-changing remote access solution available from Akamai called Enterprise Application Access EAA. My thesis was that in our cloud-first, mobile-dominated world, providing access to...
Description of the security update for Office 2010: June 13, 2017
Description of the security update for Office 2010: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2010: June 13, 2017
Description of the security update for Office 2010: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Windows kernel information disclosure vulnerability: June 13, 2017
None None...
Business Process Compromise: The Next Step in Advanced Targeted Attacks
Targeted attacks have come a long way in recent years, leveraging increasingly advanced techniques aimed at specific individuals. Often, these hackers pinpoint a single person within an enterprise, steal their credentials, log into an account, and leverage this position to find sensitive...
Healthcare Industry Cybersecurity Report
New US government report: "Report on Improving Cybersecurity in the Health Care Industry." It's pretty scathing, but nothing in it will surprise regular readers of this blog. It's worth reading the executive summary, and then skimming the recommendations. Recommendations are in six areas. The Tas...
Error: "You have not chosen to trust...'' When Launching Applications Using Citrix Receiver Through NetScaler Gateway
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users may receive the following error when launching an application with Receiver for Windows 4.7,...
