Mass-Scale Ransomware Attacks Providing Hackers the Ability to Earn Quick Money

During the past six months, the Carbon Black Threat Analysis Unit TAU analyzed more than 1,000 ransomware samples, categorizing them into 150 families, and found the following: Attackers are looking to make quick, easy money with unsophisticated malware combined with sophisticated delivery method...

bijsluiterwoordenboek.nl XSS vulnerability

Vulnerable URL: http://www.bijsluiterwoordenboek.nl/action/search/q/"--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

Equifax Suffered Data Breach After It Failed to Patch Old Apache Struts Flaw

The massive Equifax data breach that exposed highly sensitive data of as many as 143 million people was caused by exploiting a flaw in Apache Struts framework, which Apache patched over two months earlier of the security incident, Equifax has confirmed. Credit rating agency Equifax is yet another...

inmobiliaria-aco.com XSS vulnerability

Vulnerable URL: http://www.inmobiliaria-aco.com/gb/results/?modo="--!"tipooperacion=1==min=max= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14450904 VIP website status:| No Coordinated Disclosure Timeline:...

JGI CMS 1.0 Script Source Code Disclosure

Title: ======= JGI CMS - Script Source Code Disclosure Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users working in a collaborative environment. CMS...

steam-packet.com XSS vulnerability

Vulnerable URL: https://www.steam-packet.com/collection!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 352771 VIP website status:| No Coordinated...

parafia-bojkow.pl XSS vulnerability

Vulnerable URL: https://parafia-bojkow.pl/index.php?q=51akt=47=kategoria=42%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8156516 V...

Moderate: Red Hat Security Advisory: satellite and spacewalk security and bug fix update

An update for satellite-schema, spacewalk-backend, spacewalk-java, and spacewalk-schema is now available for Red Hat Satellite 5.8 and Red Hat Satellite 5.8 ELS. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base...

youppido.com XSS vulnerability

Vulnerable URL: https://www.youppido.com/it/persone-dintorni/?action=persone-dintorni〈=itid=789id=17591=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY///=0from=18to=70=2 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

OracleVM 3.3 / 3.4 : poppler (OVMSA-2017-0147)

The remote OracleVM system is missing necessary patches to address critical security updates : - Resolves: rhbz1479815 CVE-2017-9776 - Don't crash on streams without Length - Resolves: 1302365 - Use better default pixel size for printing of 0 width lines - Resolves: 1316163 - Identification of...

nakanune.ru XSS vulnerability

Vulnerable URL: http://www.nakanune.ru/theme/?tag=x Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 68646 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitte...

electrobodegas.com XSS vulnerability

Vulnerable URL: http://electrobodegas.com/company.php?id=" Details: Description| Value ---|--- Patched:| Yes, at 28.11.2017 Latest check for patch:| 28.11.2017 10:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13719171 VIP website status:| No Coordinated...

vajdaevang.hu XSS vulnerability

Vulnerable URL:...

DJI Launches Drone Bug Bounty Program

The lack of security in commercial drones has been well documented, but one Chinese manufacturer is working to fix that by incentivizing researchers who can poke holes in the software its drones run on. One of the largest unmanned aerial vehicle manufacturers, Dà-Jiāng Innovations Science and...

formations.action-sociale.org XSS vulnerability

Vulnerable URL: http://formations.action-sociale.org/recherche3.php Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

mauritel.mr XSS vulnerability

Vulnerable URL: http://www.mauritel.mr/?dnnVariable=%27dnnpageload%27:%27alert/OPENBUGBOUNTY/%27 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1616096 VIP...

DEBIAN-CVE-2015-1395

Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. dot dot in a diff file name...

Directory traversal

Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. dot dot in a diff file name...

CVE-2015-1395

Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. dot dot in a diff file name...

CVE-2015-1395

Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. dot dot in a diff file name...