Introducing the Qualys New Look and Positioning

Dear Customer, Partner and Security Professional, I would like to thank all of you for your support during our ongoing journey to a world where we are making security invisible and an integrated component of the Digital Transformation of our enterprises. With your help and the dedication of our...

CVE-2017-11349

dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data...

Free Personal Self Hosted Dynamic DNS

Free Personal Self Hosted Dynamic DNS with BIND and DNSSEC Environment: Server: static IP, running BIND Home: dynamic IP, running Debian/buntu Key Generation First step is to generate a key on the server. /etc/bind $ sudo dnssec-keygen -a HMAC-MD5 -b 512 -n HOST home.dynamic.n0where.net This...

lompocathletics.olinesports.com XSS vulnerability

Vulnerable URL: http://lompocathletics.olinesports.com/schedule.php?sport=1"...

m.dart.org XSS vulnerability

Open Bug Bounty ID: OBB-260039 Description| Value ---|--- Affected Website:| m.dart.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lhscubs.olinesports.com XSS vulnerability

Vulnerable URL: http://lhscubs.olinesports.com/schedule.php?sport=1"...

ourladyofthelakehalifax.org XSS vulnerability

Open Bug Bounty ID: OBB-258427 Description| Value ---|--- Affected Website:| ourladyofthelakehalifax.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

anguillaairservices.com XSS vulnerability

Vulnerable URL: http://www.anguillaairservices.com/schedule/index.php?airport1=1&airport2;=1"...

trainview.septa.org XSS vulnerability

Vulnerable URL: http://trainview.septa.org/trainschedule.php?trainnum=1"...

mga.edu XSS vulnerability

Vulnerable URL: http://www.mga.edu/course-schedule/index.php?quick=SUB=subj=1"...

justsaysoccer.com XSS vulnerability

Vulnerable URL: https://www.justsaysoccer.com/html/season/shared/schedules.asp?Prefix=spring=SPRING+2017=Boys=2010:U7=Brown===DTF=1/-///'/"//--...

How to Manage Scheduled Snapshots?

This article describes the method to manage snapshot schedules...

Security and Human Behavior (SHB 2017)

I'm in Cambridge University, at the tenth Workshop on Security and Human Behavior. SHB is a small invitational gathering of people studying various aspects of the human side of security, organized each year by Ross Anderson, Alessandro Acquisti, and myself. The 50 or so people in the room include...

awpwriter.org XSS vulnerability

Vulnerable URL: https://www.awpwriter.org/awpconference/scheduleauthorsignings?orderby=ecsa.lastname%2Cecsa.firstnamemethod=ASCname=xss%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3Ename=flyway=alltime=time= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.08.2017...

Google I/O 2017 application for Android has an unspecified vulnerability

Google I/O 2017 application for Android is a conference management application for Google's annual I/O conference based on the Android platform developed by Google USA. A security vulnerability exists in versions of the Google I/O 2017 application for Android-based platforms prior to 5.1.4, due t...

CVE-2016-7840

Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter...

Cross site scripting

Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter...

CVE-2016-7840

CVE-2016-7840 is a Cross-site Scripting (XSS) vulnerability in WEB SCHEDULE (Olive Design). The issue arises from a flaw in processing the month parameter, allowing remote actors to inject arbitrary web script or HTML. Documented references (JVN entries) describe CWE-79 and indicate impact on the...

CVE-2016-7840

Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter...

FIN7 Evolution and the Phishing LNK

FIN7 is a financially-motivated threat group that has been associated with malicious operations dating back to late 2015. FIN7 is referred to by many vendors as “Carbanak Group”, although we do not equate all usage of the CARBANAK backdoor with FIN7. FireEye recently observed a FIN7 spear phishin...