EulerOS Virtualization 2.5.1 : procps-ng (EulerOS-SA-2018-1326)

According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory...

Introducing the Bot Endpoint Protection Report

Todays comprehensive monitoring capabilities in Security Center provide great insight into bot activity and countermeasures applied across your valuable web properties. Filter options allow you to focus on almost any desired detail. However, understanding what is happening on specific protected...

AirTies Air 5443v2 Cross-Site Scripting Vulnerability

AirTies Air 5443v2 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in AirTies Air 5443v2. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

AirTies Air 5650 Cross-Site Scripting Vulnerability

AirTies Air 5650 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5650. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

AirTies Air 5343v2 Cross-Site Scripting Vulnerability

AirTies Air 5343v2 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5343v2. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

AirTies Air 5750 Cross-Site Scripting Vulnerability

AirTies Air 5750 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5750. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

AirTies Air 5453 Cross-Site Scripting Vulnerability

AirTies Air 5453 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5453. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

AirTies Air 5442 Cross-Site Scripting Vulnerability

AirTies Air 5442 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5442. A remote attacker can exploit the vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

fairfaxredtopcab.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-682819 Description| Value ---|--- Affected Website:| fairfaxredtopcab.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:...

CVE-2018-17590

AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17589

AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17591

AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

Philips iSite/IntelliSpace PACS Vulnerabilities (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Philips Equipment: iSite and IntelliSpace PACS Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Code/Source Code...

Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks

Certain types of online ads that expand, contract and pop-open aren’t just annoying – they can sometimes be dangerous. The ads in question are called expandable ads, which use what is called iFrame Busters code. The ads, together with iFrame Buster code, are designed to break the limits of a...

Behind BlueHat: The Art

We are just one day away from the opening of BlueHat v18 and excitement is building. One of the questions that I have gotten more frequently the past couple years is about the artwork we use for BlueHat. So yes there is a theme. 😊 Starting in 2014, we introduced the Top Hat logo which the communi...

Behind BlueHat: The Art

We are just one day away from the opening of BlueHat v18 and excitement is building. One of the questions that I have gotten more frequently the past couple years is about the artwork we use for BlueHat. So yes there is a theme. 😊 Starting in 2014, we introduced the Top Hat logo which the communi...

top-platz.de XSS vulnerability

Open Bug Bounty ID: OBB-679355 Description| Value ---|--- Affected Website:| top-platz.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Best Free Online Movie Streaming Sites for 2018

By Carolina If you are looking for a list of updated and best movie streaming sites then you have come to the right place. In this article, we have listed free movie streaming sites providing top-notch service with as few ads as possible. Enjoy! SeeHD.uno SeeHD.uno is one of the best movie...

ISACA Moscow Vulnerability Management Meetup 2018

Last Thursday, September 20th, I spoke at ISACA Moscow "Vulnerability Management" Meetup held at Polytechnic University. The only event in Moscow devoted solely to Vulnerability Management. So I just had to take part in it. The target audience of the event - people who implement the vulnerability...

Wallarm NG-WAF is Now a Part of Kong Hub to Provide Better Protection for Microservices, APIs and…

Wallarm NG-WAF is Now a Part of Kong Hub to Provide Better Protection for Microservices, APIs and Serverless Thousands of companies from startups to Fortune 500 enterprises use Kong as their API gateway. With a blazingly fast performance, it comes with a perfect feature set for everyone who manag...