Geldkarte - transaktionsid Cross Site Scripting Vulnerability

Document Title: =============== Geldkarte - transaktionsid Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2118 Release Date: ============= 2018-02-20 Vulnerability Laboratory ID VL-ID:...

AEF CMS v1.0.9 - (PM) Persistent Cross Site Vulnerability

Document Title: =============== AEF CMS v1.0.9 - PM Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2123 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-13000 CVE-ID: ======= CVE-2018-13000 Release Date:...

Phabricator: Window.opener fix bypass

Description Due to a recent reporthttps://hackerone.com/reports/306414 a fix was deployed in order to resolve the tabnabbing issue. However by using a line break the fix can be bypassed. Steps to reproduce 1 Browse to your Phabricator instance and create a new document. 2 Now paste in the followi...

Document signing deprecation in XPS Viewer

Microsoft has deprecated the Document Signing functionality in XPS Viewer. This functionality relied upon the SHA-1 algorithm and is part of our overall effort to remove this algorithm from our products. This change impacts XPS Viewer on all supported versions of Windows. FAQ 1. I need to use thi...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of February 5, 2018

It was a busy week in the cyber security world, but it shouldn’t be surprising given that the 2018 Winter Olympics in Pyeongchang have begun. I shouldn’t blame just the Olympics, but it’s hard not to given the international focus, controversy around the ban of certain athletes and its proximity t...

The vulnerability in the implementation of the anti-virus and phishing protection functions for Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows attackers to carry out phishing attacks.

The vulnerability in the implementation of malware protection functions for Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to errors in the process of checking uploaded files, which are encoded using “blob:“ and “data:“. Exploiting this vulnerability allows a malicious...

CVE-2016-0329

Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1iFix3, 10.0.1.x before 10.0.1.3iFix3, 10.0.2.x before 10.0.2.8iFix1, 10.0.4.0 before 10.0.4.0iFix8, and 10.1.0.0 before 10.1.0.0iFix3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing...

Open redirect

Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1iFix3, 10.0.1.x before 10.0.1.3iFix3, 10.0.2.x before 10.0.2.8iFix1, 10.0.4.0 before 10.0.4.0iFix8, and 10.1.0.0 before 10.1.0.0iFix3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing...

CVE-2016-0329

Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1iFix3, 10.0.1.x before 10.0.1.3iFix3, 10.0.2.x before 10.0.2.8iFix1, 10.0.4.0 before 10.0.4.0iFix8, and 10.1.0.0 before 10.1.0.0iFix3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing...

Open redirect

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2017-2166

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2017-2166

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2017-2166

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

This Week in Security News: Trojans and Cyber Hacks

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Read on for the latest on trojanized malware, smart phone hacks, and cybersecurity legislation. Dark Caracal Group Revealed: Group Used Trojanized...

Data Privacy Day

January 28 is Data Privacy Day DPD, an annual international effort to promote the importance of data privacy. DPD is sponsored in the United States by the National Cyber Security Alliance NCSA with the theme, Respecting Privacy, Safeguarding Data, and Enabling Trust. The NCSA Stay Safe Online...

Mozilla Firefox Security Advisories (MFSA2018-02, MFSA2018-03) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Open redirect

A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect. The vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could explo...

CVE-2018-0097

A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect. The vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could explo...

Cisco Prime Infrastructure Open Redirect Vulnerability

A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit this vulnerability ...

CVE-2017-1534

IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a...