2335 matches found
BlueHat v18 Announced & Call for Papers Opens
We are back! Microsoft is excited to announce the next installment of the BlueHat Security Conference – BlueHat v18. We will be holding the event at Microsoft’s headquarter campus September 25-27, 2018. This year we are adding the option for workshops and networking on the first day prior to the...
siskon.com.tr XSS vulnerability
Open Bug Bounty ID: OBB-591216 Description| Value ---|--- Affected Website:| siskon.com.tr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Solaris 10 (x86) : 120665-01
SunOS 5.10x86: tl driver patch. Date this patch was last updated by Sun : Sep/15/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
KB4038781: Windows 10 September 2017 Cumulative Update
The remote Windows host is missing security update 4038781. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory. The vulnerability could corrupt memory in a way that enables...
Fixed in Apache Tomcat 8.5.23
Important: Remote Code Execution CVE-2017-12617 When running with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default servlet to false it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any...
waitaki.govt.nz XSS vulnerability
Vulnerable URL: http://www.waitaki.govt.nz/our-council/consultation/easter-sunday-shop-trading/Pages/default.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
getaservicetrust.org XSS vulnerability
Vulnerable URL: http://getaservicetrust.org/events/eventsstatview.php?pecat=eventcat&catvalue=School%20Bag&url=%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.12.2017 Vulnerability type:| XSS Vulnerability status:|...
proevolution.ru XSS vulnerability
Vulnerable URL: http://proevolution.ru/modules/search/search.php?send=Y&search2;=1%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirm1%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.12.2017 Vulnerability type:| XSS...
Fixed in Apache Tomcat 9.0.1
Important: Remote Code Execution CVE-2017-12617 When running with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default servlet to false it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any...
Threat Outbreak Alert RuleID30804: Email Messages Distributing Malicious Software on September 29, 2017
Medium Alert ID: 55426 First Published: 2017 September 29 19:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30804 may contain the following files: Name ...
allenproperties.net XSS vulnerability
Vulnerable URL: http://www.allenproperties.net/properties/listing.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2320569 VIP website status:| No Coordinated Disclosure...
tracking.korecow.jp Open Redirect vulnerability
Vulnerable URL: http://tracking.korecow.jp/af/c81e728d9d4c2f636f067f89cc14862c/4f4adcbf8c6f66dcfc8a3282ac2bf10a/?r=data%3Atext%2Fhtml%3Bbase64%2CPHNjcmlwdD5hbGVydCgvT1BFTkJVR0JPVU5UWS8pPC9zY3JpcHQ%2B Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:|...
wonderfulmachine.com XSS vulnerability
Vulnerable URL: https://wonderfulmachine.com/ref?r=1=javascript:prompt/OPENBUGBOUNTY/; Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 465322 VIP website...
Threat Outbreak Alert RuleID30803: Email Messages Distributing Malicious Software on September 29, 2017
Medium Alert ID: 55425 First Published: 2017 September 29 17:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30803 may contain the following files: Name ...
Threat Outbreak Alert RuleID30802: Email Messages Distributing Malicious Software on September 29, 2017
Medium Alert ID: 55424 First Published: 2017 September 29 16:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30802 may contain the following files: Name ...
korea.clicads.com XSS vulnerability
Open Bug Bounty ID: OBB-317905 Description| Value ---|--- Affected Website:| korea.clicads.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
go.mihantafrih.com Open Redirect vulnerability
Vulnerable URL: http://go.mihantafrih.com/index.php?url=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
Threat Round Up for Sept 22 - Sept 29
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between September 22 and September 29. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior...
pult.ru Open Redirect vulnerability
Vulnerable URL: http://www.pult.ru/bitrix//rk.php?id=1=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 59372 VIP website status:| No...