floridabankruptcyconsultation.com XSS vulnerability

Open Bug Bounty ID: OBB-588298 Description| Value ---|--- Affected Website:| floridabankruptcyconsultation.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

vendite-straordinarie.com XSS vulnerability

Open Bug Bounty ID: OBB-590829 Description| Value ---|--- Affected Website:| vendite-straordinarie.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

copiadorasenguayaquil.com XSS vulnerability

Open Bug Bounty ID: OBB-587640 Description| Value ---|--- Affected Website:| copiadorasenguayaquil.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OS vulnerabilities detected in banner reporting (PCI-DSS check)

A service banner response from the remote host indicates an OS install at a level that may be vulnerable to one or more vulnerabilities. This plugin only runs when 'Check for PCI-DSS compliance' is enabled in the scan policy. It does not run if local security checks are enabled. It runs off of...

CVE-2018-5505

On F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR are both provisioned, TMM may restart while processing DNS requests when the virtual server is configured with a DNS profile and the Protocol setting is set to TCP...

My short review of “The Forrester Wave: Vulnerability Risk Management, Q1 2018”

Last week, March 14, Forrester presented new report about Vulnerability Risk Management VRM market. You can purchase it on official site for $2495 USD or get a free reprint on Rapid7 site. Thanks, Rapid7! I've read it and what to share my impressions. I was most surprised by the leaders of the...

Microsoft bug bounty program: $250k for reporting Meltdown & Spectre type flaws

By Waqas The bug bounty program will remain open until December 31st, 2018. This is a post from HackRead.com Read the original post: Microsoft bug bounty program: $250k for reporting Meltdown & Spectre type flaws...

perapasha.nl XSS vulnerability

Open Bug Bounty ID: OBB-578714 Description| Value ---|--- Affected Website:| perapasha.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uk.mathworks.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-578067 Description| Value ---|--- Affected Website:| uk.mathworks.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

texasplainstrail.com XSS vulnerability

Open Bug Bounty ID: OBB-575828 Description| Value ---|--- Affected Website:| texasplainstrail.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nl.iherb.com XSS vulnerability

Open Bug Bounty ID: OBB-574908 Description| Value ---|--- Affected Website:| nl.iherb.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

CVE-2018-1195: Cloud Controller API will accept a refresh token for authentication | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions You are using Cloud Controller version prior to 1.46.0 You are using cf-deployment version prior to 1.3.0 You are using cf-release version prior to 283 Description Cloud Controller accepts refresh tokens fo...

Elastic Kibana Reporting plugin 'CVE-2016-1000218' CSRF Vulnerability

Version 2.4.0 of the Reporting plugin for Elastic Kibana is vulnerable to a CSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ai7412tr6555.godo.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-569354 Description| Value ---|--- Affected Website:| ai7412tr6555.godo.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Arbitrary File Read Vulnerability in FineReport Version 8.0

FineReport reporting software is a pure Java written , data display reports and data entry forms functions in one enterprise-class web reporting tools . FineReport 8.0 version of the existence of arbitrary file read vulnerability, an attacker can be exploited to read any file on the site...

nsaohio.com XSS vulnerability

Open Bug Bounty ID: OBB-568070 Description| Value ---|--- Affected Website:| nsaohio.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www-hermes.desy.de XSS vulnerability

Open Bug Bounty ID: OBB-567752 Description| Value ---|--- Affected Website:| www-hermes.desy.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

photonews.photogenius.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-562467 Description| Value ---|--- Affected Website:| photonews.photogenius.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

wihg.res.in XSS vulnerability

Open Bug Bounty ID: OBB-562153 Description| Value ---|--- Affected Website:| wihg.res.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ngadimin.com XSS vulnerability

Open Bug Bounty ID: OBB-561169 Description| Value ---|--- Affected Website:| ngadimin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...