dota2.ru XSS vulnerability

Open Bug Bounty ID: OBB-551341 Description| Value ---|--- Affected Website:| dota2.ru Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until disclosure Disclosure Standard:| Coordinated Disclosure based on ISO 29147...

bullyingnoway.gov.au XSS vulnerability

Open Bug Bounty ID: OBB-550216 Description| Value ---|--- Affected Website:| bullyingnoway.gov.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-15944

creationtimestamp| type| source ---|---|--- 2017-12-13 09:00:49+00:00| seen| https://t.me/canyoupwnme/2863 2017-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43342 2018-05-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44597 2018-05-29 15:50:33+00:00| see...

Description of the security update for the Windows information disclosure vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018

None None...

BACKSWING - Pulling a BADRABBIT Out of a Hat

Executive Summary On Oct. 24, 2017, coordinated strategic web compromises started to distribute BADRABBIT ransomware to unwitting users. FireEye appliances detected the download attempts and blocked our user base from infection. During our investigation into the activity, FireEye identified a...

may-hotel.gr XSS vulnerability

Open Bug Bounty ID: OBB-328653 Description| Value ---|--- Affected Website:| may-hotel.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-2964

IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application. IBM X-Force ID: 113813...

libgcrypt -- side-channel attack vulnerability

GnuPG reports: Mitigate a local side-channel attack on Curve25519 dubbed "May the Fourth Be With You"...

OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successfu...

May 2017 Preview of the Quality Rollups for the .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 for Windows 7 and Windows Server 2008 R2 (KB4019288): May 16, 2017

May 2017 Preview of the Quality Rollups for the .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 for Windows 7 and Windows Server 2008 R2 KB4019288: May 16, 2017 Notice This release has been removed from Windows Update because of the issues that are described in the following .NET Blog article:...

May 2017 Preview of the Quality Rollups for the .NET Framework 2.0 Service Pack 2, 4.5.2, and 4.6 for Windows Server 2008 Service Pack 2 (KB4019291): May 16, 2017

May 2017 Preview of the Quality Rollups for the .NET Framework 2.0 Service Pack 2, 4.5.2, and 4.6 for Windows Server 2008 Service Pack 2 KB4019291: May 16, 2017 Notice This release has been removed from Windows Update because of the issues that are described in the following .NET Blog article: .N...

May 2017 Preview of the Quality Rollup for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 8.1 and Windows Server 2012 R2 (KB4019290): May 16, 2017

May 2017 Preview of the Quality Rollup for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 8.1 and Windows Server 2012 R2 KB4019290: May 16, 2017 Notice This release has been removed from Windows Update because of the issues that are described in the following .NET Blog...

OneLogin Extension for Chrome Installed

OneLogin, a password manager extension for the Chrome browser, is installed on the remote Windows host. Note that the OneLogin servers were compromised on May 31, 2017. It is strongly recommended that users change their OneLogin password and the passwords for all accounts that were stored in...

CVE-2017-2178

Untrusted search path vulnerability in Installer of electronic tendering and bid opening system available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in screensaver installers jasdf01.exe, jasdf02.exe, jasdf03.exe, jasdf04.exe, jasdf05.exe, scramblesetup.exe, clock01setup.exe, clock02setup.exe available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified...

CVE-2017-2176

Untrusted search path vulnerability in screensaver installers jasdf01.exe, jasdf02.exe, jasdf03.exe, jasdf04.exe, jasdf05.exe, scramblesetup.exe, clock01setup.exe, clock02setup.exe available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified...

CompuLab Intense PC and MintBox 2 BIOS Privilege Vulnerability

The CompuLab Intense PC and MintBox 2 are both mini-PC devices from CompuLab Israel. the BIOS is a ROM on-chip application. A BIOS privilege vulnerability exists in CompuLab Intense PC and MintBox 2 using versions of BIOS prior to 2017-05-21, which stems from the program's failure to apply write...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 29, 2017

“Anything that can go wrong will go wrong.” It’s not exactly clear how Murphy’s Law originated, but it seems to always make an appearance at the one time you can’t afford for anything to go wrong. Your laptop starts to malfunction right as you need to finish a project this happened to yours truly...

Threat Outbreak Alert RuleID29346: Email Messages Distributing Malicious Software on May 31, 2017

Medium Alert ID: 54002 First Published: 2017 May 31 17:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29346 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29345: Email Messages Distributing Malicious Software on May 31, 2017

Medium Alert ID: 54001 First Published: 2017 May 31 17:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29345 may contain the following files: Name | Size...