596 matches found
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of December 4, 2017
It snowed in Austin, Texas last night. It’s not a big deal for those of you who live in areas where you’re used to snow, but for those of us who are native Texans, it’s a big deal. Funny enough, I had scheduled a maintenance appointment for later today to make sure our heater is in working order...
abc.com.lb XSS vulnerability
Vulnerable URL: http://www.abc.com.lb/site/search?type=1='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 691434 VIP website status:| No Check abc.com.lb SSL connection:| Grade: B...
The Latest on WannaCry, UIWIX, EternalRocks and ShadowBrokers
Ransomware has gained global attention over the course of the last two weeks due to the huge spread of WannaCry. Following the initial attacks, we’ve seen UIWIX, Adylkuzz and now EternalRocks come onto the scene leveraging the same core set of vulnerabilities. The common thread between the three...
Why “Just Patch It!” Isn’t as Easy as You Think
At the Zero Day Initiative ZDI, we see patches in a way few do. We get the initial report from a researcher, we verify the issue internally, we notify the vendor, and finally we publish some details once a patch is released. Those patches represent the best method for preventing cyber attacks...
WannaCry about Vulnerability Management
Nearly all mainstream media wrote today about massive ransomware attacks around the world: 16 medical institutions in UK, strong rumours that huge companies in Russia, and even Russian Ministry of Internal Affairs suffered a damage. At this moment Kaspersky recorded more than 45,000 attacks in 74...
Virtual Patching: A Lifesaver for Web App Security
Here’s a common scenario organizations increasingly face: Too many web apps with too many vulnerabilities and no chance for immediate remediation. In the interim, the organization is left exposed to potentially devastating breaches, at a time when web apps have become one of cyber attackers’...
Protecting Your Web Apps with AppSpider Defend Until They Can Be Patched
AppSpider scans can detect exploitable vulnerabilities in your applications, but once these vulnerabilities are detected how long does it take your development teams to create code fixes for them? In some cases it could take several days to weeks before a fix/patch to resolve the vulnerability ca...
Exploit kits remain a cybercrime staple against outdated software – 2016 threat landscape review series
Despite the disruption of Axpergle Angler, which dominated the landscape in early 2016, exploit kits as a whole continued to be a threat to PCs running unpatched software. Some of the most prominent threats, from malvertising to ransomware, used exploit kits to infect millions of computers...
FTC sets $25,000 Prize for Automatic IoT Patch Management Solution
The U.S. Federal Trade Commission has announced a "prize competition" for creating a software or hardware-based solution with the ability to auto-patch vulnerable Internet of Things IoT devices. Today we are surrounded by a number of Internet-connected devices. Our homes are filled with tiny...
IBM BigFix Platform Arbitrary File Upload Vulnerability
IBM BigFix Platform formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other...
etds.kmu.edu.tw XSS vulnerability
Vulnerable URL: http://etds.kmu.edu.tw/etdservice/detail?n=10=,146 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
thewebconsole.com XSS vulnerability
Vulnerable URL: https://www.thewebconsole.com/login.php Details: Description| Value ---|--- Patched:| Yes, at 01.04.2016 Latest check for patch:| 01.04.2016 08:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 627206 Google Pagerank| 4 VIP website status:| No...
Gratipay: suppress version in Server header on gratipay.com or grtp.co
Summary: Server version information is returned in the response headers. Estimated severity: Low More info: Any page requested on the site returns a lot of information in the response headers. This information includes specific version information for the server and proxy. The following version...
m.focusfeatures.com XSS vulnerability
Vulnerable URL: http://m.focusfeatures.com/lightbox/videoiframe.php?embed=popup=%22%3E%3C/iframe%3E%3Csvg/onload=confirm%28/xssposed/%29%3E=wostrailer=720=1=1 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:19 GMT Vulnerability type:| XSS...
Exploit for CVE-2014-4113
No d...
Seemingly tasteless ESPCMS background injected, can actually be a lot of fun-vulnerability warning-the black bar safety net
Yesterday, the black bar safety net loophole platform exposes a ESPCMS of injection vulnerabilities, Ali cloud computing security attack and defense against a team of friends first time on the vulnerability to do an impact assessment. Did not think need to login to the backend before it can be...
The industry's conscience: BlackBerry can bypass operators to offer Android security patches-bug warning-the black bar safety net
Each Android phone manufacturer managed to every month on time security updates, but they face a big problem: security updates usually need to obtain the operator's approval, which means that before the update need to wait a few weeks. However, BlackBerry select uncompromising. BlackBerry company...
shopping.de XSS vulnerability
Vulnerable URL: http://www.shopping.de/la-martina-herrenhemd-navy-mit-weissem-logo.html?catid=101%22%3E%3Csvg%20onload%3Dalert%28%22XSSPOSED%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:54 GMT Vulnerability type:| XSS Vulnerabili...
theherbalgardener.com.au XSS vulnerability
Vulnerable URL: http://www.theherbalgardener.com.au/search.php?term=" Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19523893 Google Pagerank| 1 VIP websi...
