jilfond.ru XSS vulnerability

Open Bug Bounty ID: OBB-260876 Description| Value ---|--- Affected Website:| jilfond.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Thousands of Security Experts Work Together to Collectively Combat Petya / NotPetya Ransomware Attack

On Tuesday, Carbon Black’s community of security experts began working together with Carbon Black Threat Research to rapidly analyze the new ransomware family that was hitting organizations from Russia to Britain. More than 100 customers and partners communicated IOCs as the attack hit. “I heard...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Another RCE Vulnerability Patched in Microsoft Malware Protection Engine

Google Project Zero continues to scrape away at the ubiquitous Microsoft Malware Protection Engine at the core of many security products embedded in Windows, and it continues to discover new critical vulnerabilities. The latest, another remote code execution flaw, was patched on Friday after it w...

oldmillprops.com XSS vulnerability

Open Bug Bounty ID: OBB-252559 Description| Value ---|--- Affected Website:| oldmillprops.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

marketplace.somerset-kentucky.com XSS vulnerability

Vulnerable URL: http://marketplace.somerset-kentucky.com/somerset-ky/real-estate-rentals/1-bdrm-apartments-central-loca/C0A801C01d9e429CEBe9Cr832322/ Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:10 GMT Vulnerability type:| XSS Vulnerabili...

tonycabral.myhammondagent.com XSS vulnerability

Open Bug Bounty ID: OBB-251928 Description| Value ---|--- Affected Website:| tonycabral.myhammondagent.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Malware Protection Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption. An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the LocalSyste...

islesofcapri.com XSS vulnerability

Vulnerable URL: http://www.islesofcapri.com/islesofcaprirealestatebrowseproperties.php?offertype=seasonal=1/-///'/"//--...

Weak Password Vulnerability in GoodWe PV Plant Monitoring System Android APP

GoodWe PV Plant Monitoring System Android APP is a very global PV plant monitoring app. GoodWe photovoltaic power plant monitoring Android APP system has a weak password vulnerability, the attacker can use the vulnerability to directly enter the remote end of the cell phone monitoring system,...

Real Estate Classifieds Script SQL Injection Vulnerability

Real Estate Classifieds Script is based on Yii Framework - a modern framework. Real Estate Classifieds Script suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain database information...

Inside a Porn-Pimping Spam Botnet

For several months I've been poking at a decent-sized spam botnet that appears to be used mainly for promoting adult dating sites. Having hit a wall in my research, I decided it might be good to publish what I've unearthed so far to see if this dovetails with any other research out there. In late...

Real Estate Classifieds Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Real Estate Classifieds Script - SQL Injection Dork: N/A Date: 12.06.2017 Vendor : http://www.easyrealestatescript.com/ Software: http://www.easyrealestatescript.com/demo.html Demo: http://www.easyrealestatescript.com/demo.html...

Foscam camera RtspServer Denial of Service Vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. A denial of service vulnerability exists in Foscam camera RtspServer, where RtspServer crashes due to an out-of-memory read due to a negative number being incorrectly...

Cross-Site Request Forgery Vulnerability in 08CMS Real Estate System

08CMS Real Estate System is a PHP+MYSQL based, professional and secure operation solution for local real estate portals. 08cms version 7.0 real estate system has a cross-site request forgery vulnerability, which can be exploited by attackers to perform unauthorized operations...

Nanjing Palm Public Transportation APK has CAPTCHA Leakage Vulnerability

Nanjing Palm Bus is jointly created by Nanjing Public Transportation Group Co., Ltd. and Jiangsu Provincial Radio and Television Station Group. It is the only palmtop intelligent integrated service platform in Nanjing that collects real-time bus location inquiry, local news, live mobile TV and...

Weak Password Vulnerability in Android APP of Intelligent Cold Chain Monitoring Cloud Platform

Intelligent cold chain monitoring cloud platform adopts advanced cloud platform + mobile terminal / cell phone APP method to build the whole process of controllable and scalable monitoring cloud platform. There is a weak password in the Android APP system of Intelligent Cold Chain Monitoring Clou...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...