NTT WEST FLET'S VIRUS CLEAR Easy Setup & Application Tool and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool installer untrusted search path vulnerability

NTT WEST FLET'S VIRUS CLEAR Easy Setup & Application Tool and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool are both installation and configuration tools for Japan's NIPPON TELEGRAPH AND TELEPHONE NTT WEST's Virus Cleaner application setup & application tool. An untrusted search path...

Liberapay: Origin IP found, Cloudflare bypassed

Hello team, during the initial assessment of your assets I've come across what seems to be the unprotected origin server for www.liberapay.com. Description The frontend currently resolves to ████ and ███, both owned by Cloudflare, which act as your reverse proxy and WAF. By correlating your SSL...

Man who hacked West Point military academy website arrested from LA

By Waqas A hacker who hacked and defaced more than 11,000 websites This is a post from HackRead.com Read the original post: Man who hacked West Point military academy website arrested from LA...

mynextcondo.com XSS vulnerability

Open Bug Bounty ID: OBB-586451 Description| Value ---|--- Affected Website:| mynextcondo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

key-west-hurricane-lawyer-insurance-claim-damage.com XSS vulnerability

Open Bug Bounty ID: OBB-585647 Description| Value ---|--- Affected Website:| key-west-hurricane-lawyer-insurance-claim-damage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-...

Two New Papers on the Encryption Debate

Seems like everyone is writing about encryption and backdoors this season. "Policy Approaches to the Encryption Debate," R Street Policy Study 133, by Charles Duan, Arthur Rizer, Zach Graves and Mike Godwin. "Encryption Policy in Democratic Regimes," East West Institute. I recently blogged about...

Carbon Black Opens New Research and Development Office in Greater Portland, Oregon

Carbon Black is proud to announce our new office opening in Hillsboro, Oregon – just outside of Portland. The office will serve as a center for research and development, with a focus on bringing new products to market. Hillsboro lies just outside of Portland, a city that experienced a 40-percent...

west-bend.k12.wi.us XSS vulnerability

Open Bug Bounty ID: OBB-560415 Description| Value ---|--- Affected Website:| west-bend.k12.wi.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

JVN#87403477: Application and self-extracting archive containing the application of "FLET'S v4 / v6 address selection tool" may insecurely load Dynamic Link Libraries

Application and self-extracting archive containing the application of "FLET'S v4 / v6 address selection tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitra...

Multiple Vulnerabilities in West Wind Web Server

West Wind Web Server is a web application server software. A security vulnerability exists in version 6.x of West Wind Web Server that originates from the program failing to perform authentication of users accessing the /ADMIN.ASP web page. An attacker could exploit this vulnerability to execute...

Authentication flaw

West Wind Web Server 6.x does not require authentication for /ADMIN.ASP...

CVE-2018-6569

West Wind Web Server 6.x does not require authentication for /ADMIN.ASP...

CVE-2018-6569

West Wind Web Server 6.x is affected: the /ADMIN.ASP page can be accessed without authentication, allowing an attacker to perform actions with potential program execution, termination, data disclosure, or DoS as described in linked CVE records. This is supported by multiple sources (CVE-2018-6569...

rvtrader.com XSS vulnerability

Open Bug Bounty ID: OBB-553453 Description| Value ---|--- Affected Website:| rvtrader.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

west-somerset-railway.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-533553 Description| Value ---|--- Affected Website:| west-somerset-railway.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nord-west-media.de XSS vulnerability

Open Bug Bounty ID: OBB-485325 Description| Value ---|--- Affected Website:| nord-west-media.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

west-con.com XSS vulnerability

Open Bug Bounty ID: OBB-483687 Description| Value ---|--- Affected Website:| west-con.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

U.K. Man Avoids Jail Time in vDOS Case

A U.K. man who pleaded guilty to launching more than 2,000 cyberattacks against some of the world's largest companies has avoided jail time for his role in the attacks. The judge in the case reportedly was moved by pleas for leniency that cited the man's youth at the time of the attacks and a...

Design/Logic Flaw

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service by deleting the configuration via a wc.dll?wwMaintEditConfig request which reaches an older version of a West Wind Web Connection HTTP service...

Installer of "Flets Easy Setup Tool" may insecurely load Dynamic Link Libraries

Overview Installer of "Flets Easy Setup Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...