Czech-German offline dict. - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Czech-German offline dict. published at the 'play' market has multiple vulnerabilities...

Offline dictionaries - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Offline dictionaries published at the 'play' market has multiple vulnerabilities...

Offline Radio CLUB - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Offline Radio CLUB published at the 'play' market has multiple vulnerabilities...

SamSam: This New Breed Of Ransomware Targets Hospitals

Hackers are escalating recent attacks against hospitals with new strains of server-side ransomware dubbed SamSam and Maktub. Unlike traditional ransomware samples that rely on gullible users to click on a malware-infected email attachment or visit a booby-trapped website, this new breed of...

jenkins: Stored XSS vulnerability in slave offline status message (SECURITY-214)

Cross-site scripting XSS vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message...

jenkins: Stored XSS vulnerability in slave offline status message (SECURITY-214)

Cross-site scripting XSS vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message...

SUSE-SU-2016:0241-1 Security update for ecryptfs-utils

This update for ecryptfs-utils fixes the following issues: - CVE-2016-1572: A local user could have escalated privileges by mounting over special filesystems bsc962052 - CVE-2014-9687: A default salt value reduced complexity of offline precomputation attacks bsc920160...

catalog.ringside.com XSS vulnerability

Vulnerable URL: http://catalog.ringside.com:8081/webchat/email/offline-mail.jsp?workgroup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

200.14.237.34 XSS vulnerability

Vulnerable URL: http://200.14.237.34/webchat/email/offline-mail.jsp?workgroup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

matriz.netwaninfo.com XSS vulnerability

Vulnerable URL: http://matriz.netwaninfo.com:8585/webchat/email/offline-mail.jsp?workgroup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

sunatchat.sunat.gob.pe XSS vulnerability

Vulnerable URL: http://sunatchat.sunat.gob.pe/wchat/email/offline-mail.jsp?workgroup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

helpdesk.cps-datensysteme.de XSS vulnerability

Open Bug Bounty ID: OBB-113127 Description| Value ---|--- Affected Website:| helpdesk.cps-datensysteme.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hosted.chat2.webchatplus.co.uk XSS vulnerability

Vulnerable URL: https://hosted.chat2.webchatplus.co.uk:7443/webchat/email/offline-mail.jsp?workgroup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

186.114.220.82 XSS vulnerability

Vulnerable URL: http://186.114.220.82:10090/webchat/email/offline-mail.jsp?workgroup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

culivechat.com XSS vulnerability

Vulnerable URL: https://www.culivechat.com:8282/webchat/email/offline-mail.jsp?workgroup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

timbercon.com XSS vulnerability

Vulnerable URL: http://timbercon.com:9090/webchat/email/offline-mail.jsp?workgroup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2015-07821)

CloudBees Jenkins is the open source continuous integration server. A cross-site scripting vulnerability exists in CloudBees Jenkins 1.638, LTS versions prior to 1.625.2, in the slave overview page, where a remote user with certain privileges can inject web script or HTML via a slave offline stat...

CVE-2015-5326

Cross-site scripting XSS vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message...

Cross site scripting

Cross-site scripting XSS vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message...

CVE-2015-5326

Cross-site scripting XSS vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message...