1228 matches found
Hacker Admits to Mirai Attack Against Deutsche Telekom
A hacker that goes by the name “BestBuy” admitted to a German court on Friday that he was behind an attack last year that knocked close to 1 million customers of German ISP Deutsche Telekom offline. The suspect is a 29-year old British man who is only identified as “Daniel K.” He was arrested Feb...
k XSS vulnerability
Open Bug Bounty ID: OBB-266993 Description| Value ---|--- Affected Website:| k Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
k-p.net.ua Open Redirect vulnerability
Vulnerable URL: https://k-p.net.ua/forum/away.php?s=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.10.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1415001 VIP website status:| No Check...
k-and-s.com XSS vulnerability
Open Bug Bounty ID: OBB-259095 Description| Value ---|--- Affected Website:| k-and-s.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
k-12.wayne.edu XSS vulnerability
Vulnerable URL: http://www.k-12.wayne.edu/search.php?age=1"...
k-bid.com XSS vulnerability
Open Bug Bounty ID: OBB-247028 Description| Value ---|--- Affected Website:| k-bid.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
DEBIAN-CVE-2017-8422
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app...
UBUNTU-CVE-2017-8422
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app...
k-fee.com XSS vulnerability
Vulnerable URL: https://www.k-fee.com/en/search/%22%3Eblub%3Csvg%5Conload%3Dalert%28%5COPENBUGBOUNTY%5C%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1060732 VIP website...
k-expert.askkbank.com XSS vulnerability
Vulnerable URL: https://k-expert.askkbank.com/Documents/E-Book/Book 12Comfortably/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:|...
ALPINE-CVE-2017-6473
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets...
Moderate: Red Hat Security Advisory: python-oslo-middleware security update
An update for python-oslo-middleware is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Joomla JE K2 Multiple Form Story Component SQL Injection Vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE K2 Multiple Form Story component, which can be exploited by attackers to access or modify database data...
JVN#21114208: Business LaLa Call App for Android fails to verify SSL server certificates
Business LaLa Call App for Android provided by K-Opticom Corporation fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Application Update to the latest version according to the informati...
JVN#01014759: LaLa Call App for Android fails to verify SSL server certificates
LaLa Call App for Android provided by K-Opticom Corporation fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Application Update to the latest version according to the information provid...
k-fee.com XSS vulnerability
Vulnerable URL: https://www.k-fee.com/en/search/%3C%5Cscript%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%28%5CXSSPOSED%5C%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 932654 VIP...
Like/Dislike - Critical - Cross Site Request Forgery - SA-CONTRIB-2016-056
Cross Site Request Forgery Like/Dislike module can be used to Like and Dislike actions on any content. It is powered by Drupal field concept. The module does not verify user intent on like/dislike links thereby exposing a Cross Site Request Forgery CSRF vulnerability. CVE identifiers issued ACVE...
September 13, 2016 — KB3189866 (OS Builds 14393.187 and 14393.189)
None None...
k-124.co.uk XSS vulnerability
Vulnerable URL: https://www.k-124.co.uk/search.php?categoryid=222%22%3E%3C/title%3E%27%3E;%3C/script%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
