Lucene search
+L

5630 matches found

Krebs on Security
Krebs on Security
added 2018/03/16 1:55 p.m.67 views

Who Is Afraid of More Spams and Scams?

Security researchers who rely on data included in Web site domain name records to combat spammers and scammers will likely lose access to that information for at least six months starting at the end of May 2018, under a new proposal that seeks to bring the system in line with new European privacy...

6.5AI score
SaveExploits0
ThreatPost
ThreatPost
added 2018/03/15 5:47 p.m.21 views

Walmart Jewelry Partner Exposes Personal Data Of 1.3M Customers

A misconfigured Amazon S3 Simple Storage Service bucket, managed by a Walmart jewelry partner, left personal details and contact information of 1.3 million customers exposed to the public internet. The S3 repository containing a MSSQL database backup belongs to MBM Company, a Chicago, Ill.-based...

0.4AI score
SaveExploits0References3
OSV
OSV
added 2018/03/13 7:29 p.m.7 views

CVE-2017-16251

A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious script to the Personal Library by a crafted POST request. Successful exploit could allow an attacker to execute arbitrary code within the context of th...

8.8CVSS6.1AI score0.01753EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/03/13 7:00 p.m.40 views

CVE-2017-16251

A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious script to the Personal Library by a crafted POST request. Successful exploit could allow an attacker to execute arbitrary code within the context of th...

8.7AI score0.01753EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/03/12 12:00 a.m.15 views

IBM Application Performance Management for Monitoring&Diagnostics Information Disclosure Vulnerability

IBM Application Performance Management for Monitoring&Diagnostics is an application performance management tool for monitoring and diagnostics from IBM USA. A security vulnerability exists in IBM Application Performance Management for Monitoring&Diagnostics. An attacker could exploit the...

5.3CVSS6.6AI score0.0167EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2018/03/11 1:46 p.m.14 views

facade.com XSS vulnerability

Open Bug Bounty ID: OBB-578311 Description| Value ---|--- Affected Website:| facade.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
SaveExploits0
NVD
NVD
added 2018/03/08 4:29 p.m.21 views

CVE-2018-1387

IBM Application Performance Management for Monitoring & Diagnostics IBM Monitoring 8.1.3 and 8.1.4 may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210...

5.3CVSS5.1AI score0.0167EPSS
SaveExploits0References3
Qualys Blog
Qualys Blog
added 2018/03/07 5:00 p.m.66 views

GDPR: The Stakes Are High and Time Is of the Essence

With the General Data Protection Regulation GDPR going into effect in under three months, the countdown clock is fast approaching zero for organizations worldwide that handle personal data of EU residents. GDPR is a very broad and wide-ranging regulation that requires organizations to obtain a lo...

6.6AI score
SaveExploits0
CNVD
CNVD
added 2018/03/07 12:00 a.m.7 views

Memory Misreference Vulnerability in WPS office 2016 Personal/Enterprise and Kingsoft pdf

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. wps office 2016 enterprise edition and personal edition in the resolution of a specific p...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2018/03/06 12:00 a.m.16 views

The vulnerability of the uploadTelemetry and getLogs functions of the Media Server component in the Seagate Personal Cloud software, allowing a hacker to execute arbitrary commands.

The vulnerability of the uploadTelemetry and getLogs functions /usr/lib/djangohost/seagatemediaserver/views.py of the Media Server component of the software-defined networking storage device Seagate Personal Cloud relates to the absence of measures to neutralize special elements used in commands...

10CVSS5.8AI score0.54163EPSS
SaveExploits5References4
ThreatPost
ThreatPost
added 2018/03/02 3:12 p.m.79 views

Equifax Says 2.4 Million More People Impacted By Massive 2017 Breach

Equifax said that an additional 2.4 million Americans have had their personal data stolen as part of the company’s massive 2017 data breach, including their names and some of their driver’s license information. The additional identified victims bring the total of those implicated in what has beco...

10CVSS0.2AI score0.99999EPSS
SaveExploits46References11
OSV
OSV
added 2018/02/27 3:29 p.m.10 views

CVE-2017-16770

File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter...

6.5CVSS5.8AI score0.01825EPSS
SaveExploits0References1
HackRead
HackRead
added 2018/02/22 10:22 p.m.61 views

Hackers spread Android spyware through Facebook using Fake profiles

By Waqas The Android spyware was used to steal personal data of This is a post from HackRead.com Read the original post: Hackers spread Android spyware through Facebook using Fake profiles...

6.9AI score
SaveExploits0
Cisco Threats
Cisco Threats
added 2018/02/22 7:51 p.m.21 views

Threat Outbreak Alert RuleID32103: Email Messages Distributing Malicious Software on February 22, 2018

Medium Alert ID: 56910 First Published: 2018 February 22 19:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32103 may contain the following files: Name |...

0.5AI score
SaveExploits0
OSV
OSV
added 2018/02/21 4:29 p.m.11 views

CVE-2018-7261

There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences Name and Username and Configuration Site Title, Dev Site Domain, Page Parts, and Page Fields...

5.4CVSS5.8AI score0.00597EPSS
SaveExploits2References2
NVD
NVD
added 2018/02/21 4:29 p.m.28 views

CVE-2018-7261

There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences Name and Username and Configuration Site Title, Dev Site Domain, Page Parts, and Page Fields...

5.4CVSS5.5AI score0.00597EPSS
SaveExploits2References2
Prion
Prion
added 2018/02/21 4:29 p.m.24 views

Cross site scripting

There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences Name and Username and Configuration Site Title, Dev Site Domain, Page Parts, and Page Fields...

3.5CVSS5.4AI score0.00597EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2018/02/21 4:00 p.m.38 views

CVE-2018-7261

There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences Name and Username and Configuration Site Title, Dev Site Domain, Page Parts, and Page Fields...

5.5AI score0.00597EPSS
SaveExploits2References2
zdt
zdt
added 2018/02/21 12:00 a.m.76 views

Radiant CMS 1.1.4 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications 1. Introduction Vendor : Radiant Affected Product : Radiant CMS 1.1.4 Fixed in : NA Vendor Website : http://radiantcms.org/ Vulnerability Type : Persistent XSS Remote Exploitable : Yes CVE External Identifier : CVE-2018-7261 2. Overview...

3.5CVSS0.1AI score0.00597EPSS
SaveExploits2
RubySec
RubySec
added 2018/02/19 12:00 a.m.56 views

Multiple persistent XSS vulnerabilities in Radiant CMS

There are multiple Persistent XSS vulnerabilities in Radiant CMS. They affect Personal Preferences Name and Username and Configuration Site Title, Dev Site Domain, Page Parts, and Page Fields...

5.4CVSS3.3AI score0.00597EPSS
SaveExploits2References1
Rows per page
Query Builder