6688 matches found
rajamobil.com XSS vulnerability
Vulnerable URL: https://www.rajamobil.com/promo-kredit/paket/toyota/calya?tahun=2016"'--!merek=32model=1123city=type=1tipe=persen=waktu======asc==1 Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:50 GMT Vulnerability type:| XSS Vulnerability...
haerlem.nl XSS vulnerability
Vulnerable URL: http://www.haerlem.nl/index.php?id=92%22%3E%3Csvg/onload=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
OpenSSL Vulnerability
The OpenSSL library has been found to contain vulnerability CVE-2016-8610. Palo Alto Networks software makes use of the vulnerable library and may be affected. Ref PAN-68543 / CVE-2016-8610 The OpenSSL library in use by PAN-OS is patched on a regular basis. This issue affects PAN-OS 6.1.17 and...
Reverse Engineering Framework: radare2
Reverse Engineering Framework: radare2 r2 is a rewrite from scratch of radare in order to provide a set of libraries and tools to work with binary files Radare project started as a forensics tool, a scriptable command-line hexadecimal editor able to open disk files, but later support for analyzin...
hollywoodimportsinc.com XSS vulnerability
Vulnerable URL: http://www.hollywoodimportsinc.com/detail.php?vehicleid=293977page=search.php"'--!==color==year=year==by=priceorder=ASCpage=20num=3run=Foptions=Tstyle= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
ShadowBrokers Put Price on Monthly Zero Day Leaks
The threat posed by the first wave of ShadowBrokers leaks of Equation Group hacking tools was relatively benign. Some vendors had to scramble to patch zero days in older versions of products, but for the most part, the leaks and accompanying auction were more of a novelty. That obviously changed...
Samba Vulnerability CVE-2017-7494
On Wednesday, the Samba Team patched a vulnerability that exists in all versions of Samba including and after version 3.5.0. Exploitation of this vulnerability could result in remote code execution on the affected host. Samba is used to provide SMB and CIFS services for Linux systems, and is...
Pacemaker Ecosystem Fails its Cybersecurity Checkup
Pacemakers continue to be the front line of medical device security debates after a research paper published this week described a frightening list of cybersecurity issues plaguing devices built by leading manufacturers, including a lack of authentication and encryption, and the use of third-part...
Ransomware and the Internet of Things
As devastating as the latest widespread ransomware attacks have been, it's a problem with a solution. If your copy of Windows is relatively current and you've kept it updated, your laptop is immune. It's only older unpatched systems on your computer that are vulnerable. Patching is how the comput...
cjcluj.ro XSS vulnerability
Open Bug Bounty ID: OBB-240943 Description| Value ---|--- Affected Website:| cjcluj.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Digging Into WannaCry Details: Answers to Your Burning Questions
Jimmy Graham, Director of Product Management, Qualys Threat Protection & AssetView The WannaCry ransomware attack spread so quickly and has been so disruptive that IT departments can’t get enough information about what caused it, how it can be remediated and what can be done to protect their...
SSH MITM Tool
SSH MITM Tool This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and sessions are logged to disk. Of course, the...
yogamoves.nl XSS vulnerability
Vulnerable URL: https://yogamoves.nl/zoeken/?q=%3C%2Fscript%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 20:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
No More Tears: WannaCry Highlights Importance of Prompt Vulnerability Detection, Remediation
It didn’t have to happen. That’s the simple yet profound lesson from WannaCry’s ransomware rampage that has infected 300,000-plus systems in more than 150 countries, disrupting critical operations across industries, including healthcare, government, transportation and finance. If vulnerable syste...
Next Payload Could be Much Worse Than WannaCry
No one should be letting their guard down now that the WannaCry ransomware attacks have been relatively contained. Experts intimately involved with analyzing the malware and worldwide attacks urge quite the opposite, warning today that there’s nothing stopping attackers from using the available N...
vcaxxx.com XSS vulnerability
Vulnerable URL: http://www.vcaxxx.com/?nats="MC4wLjkuOS4wLjAuMC4wLjA Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4470212 VIP website status:| No Check...
Player 3 Has Entered the Game: Say Hello to 'WannaCry'
This post was authored by Martin Lee, Warren Mercer, Paul Rascagneres, and Craig Williams.Executive SummaryA major ransomware attack has affected many organizations across the world reportedly including Telefonica in Spain, the National Health Service in the UK, and FedEx in the US. The malware...
linhadapraia.pt XSS vulnerability
Vulnerable URL: http://linhadapraia.pt/en/imoveiscat.php?s=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=%22%3E%3Csvg/onload=prompt/openbugbounty/%3E%20==========&1==----- Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 20:01 GMT Vulnerability...
Microsoft's New Security Update Guides Get Mixed Reviews
Microsoft is receiving mixed reviews for its shift to delivering security update information via its newly launched Security Update Guides. The change was official in April, with Microsoft explaining it would allow system administrators to effectively pair specific patches with vulnerabilities, a...
