CVE-2018-0118

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to perform a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

clasicuyo.com.ar XSS vulnerability

Open Bug Bounty ID: OBB-509527 Description| Value ---|--- Affected Website:| clasicuyo.com.ar Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

Open redirect

IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a...

PHPSHE open source mall system onotify_url.php page exists external entity injection vulnerability

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system onotifyurl.php page...

delayed_job_web rails gem XSS vulnerability

Summary An exploitable XSS vulnerability exists in the filter functionality of the delayedjobweb rails gem version 1.4. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim’s browser. An attacker can phish an authenticated...

Threat Outbreak Alert RuleID31717: Email Messages Distributing Malicious Software on January 9, 2018

Medium Alert ID: 56422 First Published: 2018 January 9 15:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31717 may contain the following files: Name |...

CVE-2017-7998

CVE-2017-7998 : Gespage contains stored XSS vulnerabilities in the web interface. The flaw allows remote attackers to inject arbitrary scripts via (1) the printer name when adding a printer in the admin panel and (2) the username parameter to webapp/users/user_reg.jsp. Affected is Gespage version...

carethy.net XSS vulnerability

Open Bug Bounty ID: OBB-501268 Description| Value ---|--- Affected Website:| carethy.net Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...

Threat Outbreak Alert RuleID31715: Email Messages Distributing Malicious Software on January 8, 2018

Medium Alert ID: 56420 First Published: 2018 January 8 16:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31715 may contain the following files: Name |...

Threat Outbreak Alert RuleID31716: Email Messages Distributing Malicious Software on January 8, 2018

Medium Alert ID: 56421 First Published: 2018 January 8 16:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31716 may contain the following files: Name |...

Threat Outbreak Alert RuleID31714: Email Messages Distributing Malicious Software on January 8, 2018

Medium Alert ID: 56419 First Published: 2018 January 8 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31714 may contain the following files: Name |...

Threat Outbreak Alert RuleID31713: Email Messages Distributing Malicious Software on January 8, 2018

Medium Alert ID: 56418 First Published: 2018 January 8 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31713 may contain the following files: Name |...

happybike.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-500821 Description| Value ---|--- Affected Website:| happybike.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure bas...

melectronics.ch XSS vulnerability

Open Bug Bounty ID: OBB-494285 Description| Value ---|--- Affected Website:| melectronics.ch Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure bas...

secure.asteas.com XSS vulnerability

Open Bug Bounty ID: OBB-494114 Description| Value ---|--- Affected Website:| secure.asteas.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

Threat Outbreak Alert RuleID31712: Email Messages Distributing Malicious Software on January 5, 2018

Medium Alert ID: 56364 First Published: 2018 January 5 16:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31712 may contain the following files: Name |...

Threat Outbreak Alert RuleID31710: Email Messages Distributing Malicious Software on January 4, 2018

Medium Alert ID: 56358 First Published: 2018 January 4 20:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31710 may contain the following files: Name |...

crederemall.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-483957 Description| Value ---|--- Affected Website:| crederemall.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

Threat Outbreak Alert RuleID31701: Email Messages Distributing Malicious Software on January 3, 2018

Medium Alert ID: 56352 First Published: 2018 January 3 16:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31701 may contain the following files: Name |...

Threat Outbreak Alert RuleID31696: Email Messages Distributing Malicious Software on January 3, 2018

Medium Alert ID: 56351 First Published: 2018 January 3 16:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31696 may contain the following files: Name |...