CVE-2016-5811

CVE-2016-5811 affects Visonic PowerLink2: all versions prior to the October 2016 firmware release. The issue is that user-controlled input is not neutralized before being output in web pages, causing Cross-Site Scripting (XSS). Exploitation is reported to be possible remotely, with impact limited...

Threat Outbreak Alert RuleID27805: Email Messages Distributing Malicious Software on February 13, 2017

Medium Alert ID: 52654 First Published: 2017 February 13 15:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27805 may contain the following files: Name |...

Threat Outbreak Alert RuleID27753: Email Messages Distributing Malicious Software on February 13, 2017

Medium Alert ID: 52652 First Published: 2017 February 13 15:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27753 may contain the following files: Name |...

Threat Outbreak Alert RuleID27771: Email Messages Distributing Malicious Software on February 10, 2017

Medium Alert ID: 52649 First Published: 2017 February 13 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27771 may contain the following files: Name |...

Threat Outbreak Alert RuleID27747: Email Messages Distributing Malicious Software on February 10, 2017

Medium Alert ID: 52648 First Published: 2017 February 13 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27747 may contain the following files: Name |...

Threat Outbreak Alert RuleID27668: Email Messages Distributing Malicious Software on February 10, 2017

Medium Alert ID: 52645 First Published: 2017 February 13 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27668 may contain the following files: Name |...

CVE-2017-5960

An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php" URL. An attacker could execute arbitrary HTML...

CVE-2017-5960

CVE-2017-5960 affects Phalcon Eye up to version 0.4.1. The issue stems from insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php, enabling an attacker to cause the browser to execute arbitra...

Viavi Real Estate - SQL Injection

Viavi Real Estate - SQL Injection Exploit Title: Viavi Real Estate - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/viavi-real-estate/11217313 Demo: http://viavilab.com/codecanyon/realestatedemo/ Version: N/A Tested...

Joomla Joominaflileselling 2.2 SQL Injection

xBADGIRL21 N3W PUBLIC 3XPL0IT , 0day T == -- /-' // x21 Exploit Title : Joomla comjoominaflileselling 2.2 SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comjoominaflileselling Vendor Homepage : http://www.joomina.ir by amirrezatehrani Link :...

Threat Outbreak Alert RuleID27793: Email Messages Distributing Malicious Software on February 10, 2017

Medium Alert ID: 52643 First Published: 2017 February 10 15:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27793 may contain the following files: Name |...

Threat Outbreak Alert RuleID27776: Email Messages Distributing Malicious Software on February 10, 2017

Medium Alert ID: 52639 First Published: 2017 February 10 14:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27776 may contain the following files: Name |...

Threat Outbreak Alert RuleID27779: Email Messages Distributing Malicious Software on February 10, 2017

Medium Alert ID: 52640 First Published: 2017 February 10 14:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27779 may contain the following files: Name |...

Threat Outbreak Alert RuleID27765: Email Messages Distributing Malicious Software on February 10, 2017

Medium Alert ID: 52637 First Published: 2017 February 10 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27765 may contain the following files: Name |...

Threat Outbreak Alert RuleID27762: Email Messages Distributing Malicious Software on February 10, 2017

Medium Alert ID: 52636 First Published: 2017 February 10 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27762 may contain the following files: Name |...

Threat Outbreak Alert RuleID27734: Email Messages Distributing Malicious Software on February 10, 2017

Medium Alert ID: 52635 First Published: 2017 February 10 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27734 may contain the following files: Name |...

CVE-2016-10216

ITDB 1.23 and earlier permits XSS via insufficient filtering of the value POST parameter sent to itdb-1.23/js/DataTables-1.8.2/examples/examples_support/editable_ajax.php. An attacker could inject and execute arbitrary HTML/JavaScript in a user’s browser within the vulnerable website context. The...

D-Link DIR-600M - Cross-Site Request Forgery

D-Link DIR-600M - Cross-Site Request Forgery Exploit Title:D-link wireless router DIR-600M – Cross-Site Request Forgery CSRF vulnerability Google Dork:N/A Date: 07/02/2017 Exploit Author:Ajay S. Kulal www.twitter.com/ajaykulal Vendor Homepage:dlink.com Software Link:N/A Version:Hardware version: ...

jetnet.uz XSS vulnerability

Vulnerable URL: https://jetnet.uz/%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 75360 VIP website status:| No Check jetnet.uz SSL...

Threat Outbreak Alert RuleID27601: Email Messages Distributing Malicious Software on February 9, 2017

Medium Alert ID: 52626 First Published: 2017 February 9 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27601 may contain the following files: Name |...