Improper access control

The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox...

CVE-2017-16088

The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox...

search.un.org XSS vulnerability

Open Bug Bounty ID: OBB-548794 Description| Value ---|--- Affected Website:| search.un.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.49-alt0.M70P.1

1:4.1.49-alt0.M70P.1 built Jan. 25, 2018 kernelbot in task 198490 Jan. 24, 2018 Kernel Bot - v4.1.49 Fixes: CVE-2017-0861, CVE-2017-1000407, CVE-2017-7184...

un-act.org XSS vulnerability

Open Bug Bounty ID: OBB-501190 Description| Value ---|--- Affected Website:| un-act.org Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...

un-kaerjeng.lu XSS vulnerability

Open Bug Bounty ID: OBB-458749 Description| Value ---|--- Affected Website:| un-kaerjeng.lu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Threat Outbreak Alert RuleID31556: Email Messages Distributing Malicious Software on December 7, 2017

Medium Alert ID: 56188 First Published: 2017 December 7 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31556 may contain the following files: Name |...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.46-alt0.M70P.1.1

1:4.1.46-alt0.M70P.1.1 built Dec. 5, 2017 kernelbot in task 195831 Dec. 5, 2017 Kernel Bot - temporary fix for HugeDirtyCowPOC fixes CVE-2017-1000405...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.46-alt0.M70P.1

1:4.1.46-alt0.M70P.1 built Nov. 16, 2017 kernelbot in task 194626 Nov. 15, 2017 Kernel Bot - v4.1.46 Fixes: CVE-2017-0786, CVE-2017-12153, CVE-2017-12154, CVE-2017-12193, CVE-2017-15265...

Debut Embedded HTTPd 1.20 - Denial of Service

Exploit Title: Remote un-authenticated DoS in Debut embedded httpd server in Brother printers Date: 11/02/2017 Exploit Author: z00n @0xz00n Vendor Homepage: http://www.brother-usa.com Version: = 1.20 CVE : CVE-2017-16249 Description: The Debut embedded http server contains a remotely exploitable...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.45-alt0.M70P.1.1

1:4.1.45-alt0.M70P.1.1 built Oct. 19, 2017 kernelbot in task 191162 Oct. 18, 2017 Kernel Bot - v4.1.45 Fixes: CVE-2017-11600...

Nuclear War Isn’t North Korea’s Only Threat

Editor's Note: This opinion piece originally appeared on CNN.com North Korea has launched 22 missiles in 15 tests in 2017. According to US intelligence sources, the most recent test detonated a 140-kiloton nuclear device, which the North Koreans claim was a hydrogen bomb. That's 10 times as...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.44-alt0.M70P.1.1

1:4.1.44-alt0.M70P.1.1 built Oct. 17, 2017 kernelbot in task 190982 Oct. 17, 2017 Kernel Bot - Local root in alsa fixed Fixes: CVE-2017-15265...

Capturing, Analyzing and Responding to Cyber Attacks: cyberprobe

The Cyberprobe project is an open-source distributed architecture for real-time monitoring of networks against attack. The software consists of two components: a probe, which collects data packets and forwards it over a network in standard streaming protocols. a monitor, which receives the stream...

TP-Link Archer C9(UN) Arbitrary Password Reset Vulnerability

TP-Link Archer C9UN is a wireless router product from China P&L TP-LINK. A security vulnerability exists in the passwdrecovery.lua file in the TP-Link Archer C9UN version V2160517. An attacker can exploit the vulnerability to reset the administrator password...

July 7, 2017 – Morning Cyber Coffee Headlines – “Spiderman” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 7, 2017 - Headlines Carbon Black in the News: Residents of these states ar...

July 6, 2017 – Morning Cyber Coffee Headlines – “Dalai Lama” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 6, 2017 - Headlines UN finds cybersecurity is a struggle worldwide - CNET...

design-moi-un-mouton.fr XSS vulnerability

Vulnerable URL: http://www.design-moi-un-mouton.fr/catalogsearch/result/?q=%27%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

un.org XSS vulnerability

Vulnerable URL: http://www.un.org/arabic/docs/viewdoc.asp?docnumber=%3CsvG%20onLoad=prompt%28%22OPENBUGBOUNTY%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 19:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

CVE-2017-5879

An issue was discovered in Exponent CMS 2.4.1. This is a blind SQL injection that can be exploited by un-authenticated users via an HTTP GET request and which can be used to dump database data out to a malicious server, using an out-of-band technique, such as selectloadfile. The vulnerability...