Cross site scripting

modauthmellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site...

Threat Outbreak Alert RuleID28257: Email Messages Distributing Malicious Software on March 13, 2017

Medium Alert ID: 53006 First Published: 2017 March 13 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28257 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28256: Email Messages Distributing Malicious Software on March 13, 2017

Medium Alert ID: 53005 First Published: 2017 March 13 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28256 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28255: Email Messages Distributing Malicious Software on March 13, 2017

Medium Alert ID: 53004 First Published: 2017 March 13 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28255 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28247: Email Messages Distributing Malicious Software on March 13, 2017

Medium Alert ID: 53003 First Published: 2017 March 13 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28247 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28264: Email Messages Distributing Malicious Software on March 13, 2017

Medium Alert ID: 53010 First Published: 2017 March 13 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28264 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28261: Email Messages Distributing Malicious Software on March 13, 2017

Medium Alert ID: 53009 First Published: 2017 March 13 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28261 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28258: Email Messages Distributing Malicious Software on March 13, 2017

Medium Alert ID: 53007 First Published: 2017 March 13 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28258 may contain the following files: Name | Si...

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-03619)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

Nintendo Switch - WebKit Code Execution (PoC)

CVE-2016-4657 Switch PoC body font-size: 2em; a text-decoration: none; color: 000; a:hover color: f00; font-weight: bold; CVE-2016-4657 Nintendo Switch PoC go! reload waiting... click go. // display JS errors as alerts. Helps debugging. window.onerror = functionerror, url, line alerterror+'...

CVE-2017-6812

MaNGOSWebV4 4.0.8 is affected by a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter). The vulnerability stems from unsanitized input echoed back to the page, enabling arbitrary script execution if a user visits a crafted URL. Affected product is MaNGOSWebV4; no vendor versio...

Vanelo - SQL Injection

Exploit Title: Vanelo – Wanelo Clone - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.zoplay.com/ Software: https://www.zoplay.com/web/trending-marketplace-website/ Demo: http://wanelo.zoplay.com/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan...

syr.de XSS vulnerability

Vulnerable URL: http://www.syr.de/en/index.asp?art=pressearchiv=37=2'"--!confirmOPENBUGBOUNTY...

Threat Outbreak Alert RuleID28198: Email Messages Distributing Malicious Software on March 10, 2017

Medium Alert ID: 52990 First Published: 2017 March 10 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28198 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28190: Email Messages Distributing Malicious Software on March 10, 2017

Medium Alert ID: 52989 First Published: 2017 March 10 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28190 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28166: Email Messages Distributing Malicious Software on March 10, 2017

Medium Alert ID: 52988 First Published: 2017 March 10 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28166 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28243: Email Messages Distributing Malicious Software on March 10, 2017

Medium Alert ID: 52993 First Published: 2017 March 10 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28243 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28211: Email Messages Distributing Malicious Software on March 9, 2017

Medium Alert ID: 52980 First Published: 2017 March 9 17:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28211 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID28239: Email Messages Distributing Malicious Software on March 9, 2017

Medium Alert ID: 52981 First Published: 2017 March 9 17:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28239 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID28229: Email Messages Distributing Malicious Software on March 9, 2017

Medium Alert ID: 52976 First Published: 2017 March 9 14:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28229 may contain the following files: Name | Siz...