Russian Cybercriminal Pleads Guilty to Operating Kelihos Botnet

By Uzair Amir A Russian national namely Peter Yuryeich Levashov has pleaded guilty to operating the Kelihos botnet, which was used to launch a huge spamming and credential stealing campaign across the globe. Levashov, a 38-year old resident of St. Petersburg, Russia, was presented before a...

st-augustin.ch XSS vulnerability

Open Bug Bounty ID: OBB-672294 Description| Value ---|--- Affected Website:| st-augustin.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mairie-st-savin.fr XSS vulnerability

Open Bug Bounty ID: OBB-666559 Description| Value ---|--- Affected Website:| mairie-st-savin.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

apeman-app-mqtt (>=1.0.0, <=2.0.1), apeman-proto-mqtt (>=1.0.0, <=2.0.0) +20 more potentially affected by CVE-2017-16224 via st (1.1.0)

st NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on st and may be impacted: - apeman-app-mqtt =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.0.0, =0.0.1, =1.0.0-pre1, =1.0.2, =0.0.8, =0.2.1 - mqtter 0.3.1 and more Source cves: CVE-2017-16224 Sourc...

Open Redirect in st

st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 redirect to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers treat as a...

st-martin.eu XSS vulnerability

Open Bug Bounty ID: OBB-653184 Description| Value ---|--- Affected Website:| st-martin.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-walburg.de XSS vulnerability

Open Bug Bounty ID: OBB-652835 Description| Value ---|--- Affected Website:| st-walburg.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-bonifatius-stadtallendorf.de XSS vulnerability

Open Bug Bounty ID: OBB-652830 Description| Value ---|--- Affected Website:| st-bonifatius-stadtallendorf.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-peter-und-paul-hn.de XSS vulnerability

Open Bug Bounty ID: OBB-643856 Description| Value ---|--- Affected Website:| st-peter-und-paul-hn.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mt-st-michel.net XSS vulnerability

Open Bug Bounty ID: OBB-640153 Description| Value ---|--- Affected Website:| mt-st-michel.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-francois.be XSS vulnerability

Open Bug Bounty ID: OBB-637553 Description| Value ---|--- Affected Website:| st-francois.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

html.datasheetq.com XSS vulnerability

Open Bug Bounty ID: OBB-633772 Description| Value ---|--- Affected Website:| html.datasheetq.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stthomasgirlsschool.com XSS vulnerability

Open Bug Bounty ID: OBB-628528 Description| Value ---|--- Affected Website:| stthomasgirlsschool.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-16224

st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 redirect to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers treat as a...

Cross site request forgery (csrf)

st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 redirect to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers treat as a...

CVE-2017-16224

The CVE-2017-16224 entry concerns the Node.js module st, which serves static files. A crafted request can trigger an HTTP 301 redirect to an entirely different domain. This requires st to be serving from the server root (/) rather than a subdirectory (e.g., /static/). The redirect URL ends with U...

st-simeon-de-bressieux.fr XSS vulnerability

Open Bug Bounty ID: OBB-623221 Description| Value ---|--- Affected Website:| st-simeon-de-bressieux.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score...

st-hippolyte.reseaudescommunes.fr XSS vulnerability

Open Bug Bounty ID: OBB-623001 Description| Value ---|--- Affected Website:| st-hippolyte.reseaudescommunes.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSS...

st-secure.com XSS vulnerability

Open Bug Bounty ID: OBB-621921 Description| Value ---|--- Affected Website:| st-secure.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the conference communication component in Telecommunications Systems Mitel Connect OnSite and ST14.2 allows a intruder to execute arbitrary code.

The vulnerability of the conference communication components in Mitel Connect OnSite and ST 14.2 systems is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to inject arbitrary code into the generated PHP files and execute it using specially crafte...