aim4aiims.in XSS vulnerability

Open Bug Bounty ID: OBB-202060 Description| Value ---|--- Affected Website:| aim4aiims.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

NTP DoS Exploit Released — Update Your Servers to Patch 10 Flaws

A proof-of-concept PoC exploit for a critical vulnerability in the Network Time Protocol daemon ntpd has been publically released that could allow anyone to crash a server with just a single maliciously crafted packet. The vulnerability has been patched by the Network Time Foundation with the...

Heap-buffer-overflow in find_minlength

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4881488118022144 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x614000002c33 Crash State:...

study-in-germany.bg XSS vulnerability

Vulnerable URL: http://www.study-in-germany.bg/index.php?m=107"〈=1id=79=4ezikkurs=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26636997 VIP website status:| No Check...

Multiple Intel Software Products impacted by CVE-2016-4300

Summary: Multiple Intel® Education Study Software Products are potentially impacted by CVE-2016-4300 libarchive Description: Multiple Intel® Education Study Software Products are potentially impacted by CVE-2016-4300 libarchive. The vulnerabilities can potentially lead to a privilege escalation o...

study-in.de XSS vulnerability

Vulnerable URL: https://www.study-in.de/en/plan-your-studies/find-programme-and-university/?degree=2168054539="=4893651565=result Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

EU Struggles to Determine Growing Cost of Cyberattacks

After painstakingly calculating the true cost of cybercrime in the European Union researchers conclude it’s nearly impossible to come up with hard numbers. In a study released this week by the European Union Agency For Network And Information Security ENISA researchers assert that it’s vitally...

SQL injection vulnerability in the xh parameter of the student/WorkAndStudy.asp page of the informatization management system of Guangzhou Zhongda Dongri Education Technology Co.

Guangzhou Zhongda Dongri Education Technology Co., Ltd. education information management system is to provide an integrated campus information solution. A SQL injection vulnerability exists in the informatization management system of Guangzhou CUHK Dongri Education Technology Co. The lack of...

Millet user Be careful a system vulnerability has been hacker caught-vulnerability warning-the black bar safety net

You use the Xiaomi mobile phone? You the MIUI system is a 7. 2 The stable version before the system? If Yes, then congratulations you won the lottery. Your phone will likely be hack via a remote code execution vulnerability in the control. ! Millet user Be careful a system vulnerability has been...

studyinnewzealand.govt.nz XSS vulnerability

Vulnerable URL: http://www.studyinnewzealand.govt.nz/search?keyword=%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 21.04.2017 Latest check for patch:| 21.04.2017 06:09 GMT Vulnerability type:| XSS Vulnerability status:| Public...

Lenovo Tells Users to Uninstall Vulnerable Updater

Lenovo has waved the white flag on a vulnerable component of its pre-installed software updater and recommends that users uninstall it from more than 110 notebook and desktop models running Windows 10. The decision to have users yank the Lenovo Accelerator Application comes days after a Duo Labs...

WordSearch Japanese Study FREE - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application WordSearch Japanese Study FREE published at the 'play' market has multiple vulnerabilities...

chegg.com XSS vulnerability

Vulnerable URL: http://www.chegg.com/study/qa/post Details: Description| Value ---|--- Patched:| Yes, at 12.12.2017 Latest check for patch:| 12.12.2017 07:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2178 Google Pagerank| 7 VIP website status:| Yes Check...

studyinnewzealand.govt.nz XSS vulnerability

Vulnerable URL: http://www.studyinnewzealand.govt.nz/search?keyword=%22%3E%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 19.07.2017 Latest check for patch:| 19.07.2017 11:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Seemingly tasteless ESPCMS background injected, can actually be a lot of fun-vulnerability warning-the black bar safety net

Yesterday, the black bar safety net loophole platform exposes a ESPCMS of injection vulnerabilities, Ali cloud computing security attack and defense against a team of friends first time on the vulnerability to do an impact assessment. Did not think need to login to the backend before it can be...

bradford.ac.uk XSS vulnerability

Vulnerable URL: http://www.bradford.ac.uk/study/courses/ Details: Description| Value ---|--- Patched:| Yes, at 01.12.2015 Latest check for patch:| 01.12.2015 14:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 89103 Google Pagerank| 7 VIP website status:| Yes...

Caution! Hackers Can Easily Hijack Popular Baby Monitors to Watch Your Kids

Several video baby monitors from six different manufacturers were under scrutiny for in-depth security testing, and the outcome was negative. Yes, they lacked in serving basic security through their devices. At the High Technology Crime Investigation Association HTCIA conference on September 2,...

[SECURITY] Fedora 20 Update: kiten-4.14.1-1.fc20

Japanese Reference/Study Tool...

AdThief iOS Malware Affecting 75K Jailbroken Devices

A relatively new form of malware on iOS is estimated to have stolen revenue from 22 million ads and infected upwards to 75,000 devices so far. The malware, iOS/AdThief, was first identified back in March but wasn’t fully articulated until Axelle Aprville, a researcher with Fortinet, looked into t...

Half-Life StatsMe 2.6.x Plug-in MakeStats Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6578/info The Half-Life StatsMe plug-in is prone to an exploitable format string vulnerability. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute...