Android Security Bulletin—September 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of September 05, 2017 or later address all of these issues. Refer to the Pixel and Nexus update schedule to learn how to check a device's security patch level. Partners were...

nooresunnat.com XSS vulnerability

Vulnerable URL: http://www.nooresunnat.com/Search.php?selectBayanType=21=14=Lahab%22%3E%3Csvg/onload=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 271130 VIP...

pagina3.com.br Open Redirect vulnerability

Vulnerable URL: http://www.pagina3.com.br/adserver/www/delivery/ck.php?oadest=https%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 379206 VI...

Threat Outbreak Alert RuleID30377: Email Messages Distributing Malicious Software on September 1, 2017

Medium Alert ID: 55004 First Published: 2017 September 2 03:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30377 may contain the following files: Name |...

autoget.ru XSS vulnerability

Vulnerable URL:...

Threat Outbreak Alert RuleID30453: Email Messages Distributing Malicious Software on September 1, 2017

Medium Alert ID: 55020 First Published: 2017 September 1 16:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30453 may contain the following files: Name |...

Threat Outbreak Alert RuleID30430: Email Messages Distributing Malicious Software on September 1, 2017

Medium Alert ID: 55019 First Published: 2017 September 1 16:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30430 may contain the following files: Name |...

aktionspreis.de XSS vulnerability

Open Bug Bounty ID: OBB-276156 Description| Value ---|--- Affected Website:| aktionspreis.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

oreca-store.com XSS vulnerability

Open Bug Bounty ID: OBB-274243 Description| Value ---|--- Affected Website:| oreca-store.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

latinamerica.jll.com XSS vulnerability

Vulnerable URL: http://www.latinamerica.jll.com/latin-america/es-ar//buscar?k= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check latinamerica.jll.com SSL...

jobwise.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-269914 Description| Value ---|--- Affected Website:| jobwise.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kaakkuri.finna.fi XSS vulnerability

Vulnerable URL: https://kaakkuri.finna.fi//'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| Yes, at 12.09.2017 Latest check for patch:| 12.09.2017 13:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

nat-geo.ru Open Redirect vulnerability

Vulnerable URL: http://www.nat-geo.ru/go.php?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.09.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 32581 VIP website status:| Yes Check...

Researcher Claims Samsung's Tizen OS is Poorly Programmed; Contains 27,000 Bugs!

A researcher has claimed that Samsung's Tizen operating system that runs on millions of Samsung products is so poorly programmed that it could contain nearly 27,000 programming errors, which could also lead to thousands of vulnerabilities. Tizen is a Linux-based open-source operating system backe...

Google to Fully Distrust WoSign/StartCom SSL Certs in Chrome 61

Websites that are still using digital certificates issued by Chinese Certificate Authority WoSign may want to accelerate their plans to replace those certs. Google last week said it will fully distrust remaining certificates issued by the CA starting with Chrome 61. Devon O’Brien of the Chrome...

dnevnik.si XSS vulnerability

Vulnerable URL: https://dnevnik.si/iskalnik?q=a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3E%3C/title%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

mergr.com XSS vulnerability

Vulnerable URL: https://mergr.com/browse/search?s=aaaaaaaaaaaaaaaaaa" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 636586 VIP website status:| No Check mergr.com SSL connection:|...

blog.sexybbwexgf.com XSS vulnerability

Vulnerable URL: http://blog.sexybbwexgf.com/?nats=t" onmouseover=alert/OPENBUGBOUNTY/;MC4wLjExMy4xMTQuMC4wLjAuMC4w Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

BSA-2017-334

Security Advisory ID : BSA-2017-334 Component : zlib Revision : 2.0: Interim An oldinffast.coptimization turns out to not be optimal anymore with modern compilers, and furthermore was not compliant withtheCstandard, for which decrementing a pointer before its allocated memory is undefined. Affect...

Description of the cumulative update for Office Communications Server 2007 R2, Core Components: September 2011

Describes the cumulative update for Office Communications Server 2007 R2, Core Component that is dated September 2011.SummaryThis article describes the cumulative update for Microsoft Office Communications Server 2007 R2, Core Component that is dated September 2011. ResolutionUpdate package...