Dridex Adopting Dyre Tactics, Targeting U.K. Banks

Attackers behind the Dridex Trojan have narrowed their sights on banks based in the United Kingdom frequented by high-value business accounts, researchers claim. When a new version of the Trojan was released two weeks ago, it was promptly followed by a series of infection campaigns that focused o...

vistaprint.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.vistaprint.co.uk/add-coupon.aspx?redirect=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 15.03.2017 Latest check for patch:| 15.03.2017 17:20 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

bahlerweb.cs.ucl.ac.uk XSS vulnerability

Vulnerable URL: http://bahlerweb.cs.ucl.ac.uk/cgi-bin/SPGE/geexview Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| ...

vpn.phantom.uk.net XSS vulnerability

Vulnerable URL: http://vpn.phantom.uk.net:9090/webchat/email/offline-mail.jsp;jsessionid=128xwe1zm89eg1u90on6b04sml?workgroup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability...

directory.ams-uk.org XSS vulnerability

Vulnerable URL: http://directory.ams-uk.org/schools-search.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website status:| No...

Google’s $85 Chromebit Lets You Turn Any Monitor or TV into a Computer

Google and Asus are finally ready to release their new micro Chrome OS computer called the Chromebit — that retails at a great price, just $85. That is quite cheap for what is essentially a portable computer that you can take anywhere in your pocket. Also Read: CHIP — The World's First $9 Compute...

giftshop.cancerresearchuk.org XSS vulnerability

Vulnerable URL: http://giftshop.cancerresearchuk.org/catalogsearch/result/?q="';--=relevance=desc Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

heatshrink-online.co.uk XSS vulnerability

Vulnerable URL: http://www.heatshrink-online.co.uk/shop/search.php?q=%22%3E%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 20.11.2015 Latest check for patch:| 20.11.2015 06:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

New Campaign Shows Dridex Active, Targeting the French

Two weeks after authorities announced they had taken down the botnet behind the banking malware Dridex, new research suggests the threat is alive and well. Researchers with security company Invincea announced today that they’ve noticed 60 instances of attackers dropping Dridex on users in France,...

autotrader.co.uk XSS vulnerability

Vulnerable URL: http://www.autotrader.co.uk/search/used/bikes/%22%3E%3Cimg%20src=x%20onerror=prompt%28'XSSPOSED'%29;%3E Details: Description| Value ---|--- Patched:| Yes, at 06.11.2015 Latest check for patch:| 06.11.2015 14:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

South Korea Signs Up to Cyber Theft Pledge

On Friday the Obama administration secured its second win toward establishing a new norm in cyberspace. The Joint Fact Sheet published by the White House includes the following language: "no country should conduct or knowingly support cyber-enabled theft of intellectual property, trade secrets, o...

gettyimages.co.uk XSS vulnerability

Vulnerable URL: http://www.gettyimages.co.uk/search/2/image?family=creative=rm=rf=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E= Details: Description| Value ---|--- Patched:| Yes, at 07.08.2016 Latest check for patch:| 07.08.2016 14:19 GMT Vulnerability type:| XSS Vulnerability status:|...

Three Politicians Hacked Using Unsecured Wi-Fi Network

If you are one of our readers who follow The Hacker News every update, you probably know that Public WiFi network is a security risk. But many people aren’t aware, including our great politicians. Internet security provider F-Secure carried out an experimental hack against three prominent UK...

UK to ban WhatsApp, iMessage and Snapchat Under New Laws

If you rely on messaging apps to remain in contact with your family members and friends, then you may have to switch back to old-fashioned text messaging service in matter of weeks due to a new law currently going through Parliament. WhatsApp and Facebook Messenger to Ban in UK The popular...

CVE-2015-2966

Directory traversal vulnerability in the Droidware UK Explorer+ File Manager application before 2.3.3 for Android allows remote attackers to write to arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the Droidware UK Explorer+ File Manager application before 2.3.3 for Android allows remote attackers to write to arbitrary files via unspecified vectors...

CVE-2015-2966

CVE-2015-2966 affects Droidware UK Explorer+ File Manager for Android, prior to version 2.3.3. A directory traversal issue in how file names are processed allows a remote, unauthenticated attacker to write arbitrary files in directories the app can access. Impact is remote code or data tampering ...

JVN#77386811: Explorer+ File Manager vulnerable to directory traversal

Explorer+ File Manager provided by Droidware UK contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has...

core.materials.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-64997 Description| Value ---|--- Affected Website:| core.materials.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID14867: Email Messages Distributing Malicious Software on April 23, 2015

Medium Alert ID: 38509 First Published: 2015 April 23 17:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14867 may contain the following files: Name | Si...