CVE-2012-6671

DragonByte Technologies Forumon RPG for vBulletin (module) is affected by cross-site scripting in actions/main.php prior to version 1.0.8. The vulnerability allows remote attackers to inject arbitrary script/HTML via monster[title] or monster[description] when creating a new monster, indicating a...

CVE-2012-6668

Multiple cross-site scripting XSS vulnerabilities in the Shout Reports in the DragonByte Technologies vBShout module before 6.0.6 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the 1 reportreason parameter in actions/doreport.php or 2 modnotes parameter in...

CVE-2012-6670

Multiple cross-site scripting XSS vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the reason parameter in 1 actions/nominatemedal.php or 2 actions/requestmedal.php...

CVE-2012-6670

DragonByte Technologies vbActivity for vBulletin is affected by multiple XSS vulnerabilities in versions prior to 3.0.1. The issue allows remote attackers to inject arbitrary web script or HTML via the reason parameter in actions/nominatemedal.php or actions/requestmedal.php. This is due to impro...

CVE-2012-6667

Cross-site scripting XSS vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote attackers to inject arbitrary web script or HTML via the shout parameter in a shout action...

Cross site scripting

Cross-site scripting XSS vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote attackers to inject arbitrary web script or HTML via the shout parameter in a shout action...

CVE-2012-6667

DragonByte Technologies vBShout for vBulletin contains a Cross‑site Scripting (XSS) vulnerability in vbshout.php. The issue allows remote attackers to inject arbitrary web script or HTML via the shout parameter in a shout action. The provided references indicate reflected XSS and standard impacts...

Huawei P8 wkupccpu debugfs Kernel Buffer Overflow Vulnerability

Exploit for hardware platform in category dos / poc Vulnerability Summary The following advisory describes a buffer overflow found in Huawei P8 Lite ALE-21 HI621sft, operating system versions EMUI 3.1 – wkupccpu debugfs driver. Huawei Technologies Co. Ltd. is “a multinational networking and...

Operation Dragonfly Analysis Suggests Links to Earlier Attacks

ARCHIVED STORY Operation Dragonfly Analysis Suggests Links to Earlier Attacks By Trellix · December 17, 2017 On September 6, Symantec published details of the Dragonfly campaign, which targeted dozens of energy companies throughout 2017. This attack was effectively Dragonfly 2.0, an update to a...

Multiple OEM - 'nsd' Remote Stack Format String (PoC)

STX Subject: Remote Stack Format String in 'nsd' binary from multiple OEM Attack vector: Remote Authentication: Anonymous no credentials needed Researcher: bashis December 2017 PoC: https://github.com/mcw0/PoC Release date: December 14, 2017 Full Disclosure: 0-Day - PoC - 1 $ curl...

Microsoft Internet Explorer Scripting Engine CVE-2017-11907 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Internet Explorer 9, 10 and 11 are...

Detonating a bad rabbit: Windows Defender Antivirus and layered machine learning defenses

Windows Defender Antivirus uses a layered approach to protection: tiers of advanced automation and machine learning models evaluate files in order to reach a verdict on suspected malware. While Windows Defender AV detects a vast majority of new malware files at first sight, we always strive to...

Detonating a bad rabbit: Windows Defender Antivirus and layered machine learning defenses

Windows Defender Antivirus uses a layered approach to protection: tiers of advanced automation and machine learning models evaluate files in order to reach a verdict on suspected malware. While Windows Defender AV detects a vast majority of new malware files at first sight, we always strive to...

AMAG Symmetry Door Edge Network Controllers Command Execution Vulnerability

AMAG Symmetry Door Edge Network Controllers is a symmetry edge access control product from AMAG Technologies, Inc. in the United States. A security vulnerability exists in AMAG Symmetry Door Edge Network Controllers that stems from improper access control. The vulnerability can be exploited by a...

Cybercriminals vs financial institutions in 2018: what to expect

Introduction – key events in 2017 2017 was a year of great changes in the world of cyberthreats facing financial organizations. Firstly, in 2017 we witnessed a continuation of cyberattacks targeting systems running SWIFT — a fundamental part of the world's financial ecosystem. Attackers were able...

Technologies Detected

This is an informational plugin to inform the user what technologies the framework has detected on the target application, which can then be examined and checked for known vulnerable software versions No source data...

feel-technologies.com XSS vulnerability

Open Bug Bounty ID: OBB-446280 Description| Value ---|--- Affected Website:| feel-technologies.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Apache Struts2 S2-055(CVE-2017-7525)

Summary Vulnerability in the Jackson JSON library | | | | :------------ | :------------ | | Who should read this | All Struts 2 developers and users which are using the REST plugin | | Impact of vulnerability | Not clear, please read the linked issue for more details...

WhatWeb v0.4.9 - Next Generation Web Scanner

WhatWeb identifies websites. Its goal is to answer the question, “What is that Website?”. WhatWeb recognises web technologies including content management systems CMS, blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1700...

SOC Forum 2017: How I Learned to Stop Worrying and Love Massive Malware Attacks

Today I spoke at SOC Forum 2017 in Moscow. It was a great large-scale event about Security Operation Centers. 2,700 people registered. Lots of people in suits . And lots of my good fellows. The event was held in Radisson Royal Congress Park. There were three large halls for presentations and a hu...