CVE-2016-6371

CVE-2016-6371 describes a directory traversal flaw in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) web interface (vulnerable in 10.6(3) and earlier). The root cause is insufficient validation of the HTTP URL, enabling an unauthenticated, remote attacker to write arbitrary files via a ...

CVE-2016-6370

The CVE-2016-6370 issue affects Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) up to version 10.6(3) and earlier. A vulnerability in the web interface permits a remote authenticated attacker to read arbitrary files by sending a crafted HTTP pathname, due to insufficient input validation...

thepiratebay.je XSS vulnerability

Vulnerable URL: http://thepiratebay.je/search/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2748064 VIP website status:| No Check thepiratebay.je SSL connection:| Grade: F...

thepiratebay.de.com XSS vulnerability

Vulnerable URL: http://thepiratebay.de.com/search/" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2341021 VIP website status:| No Check thepiratebay.de.c...

mms.is XSS vulnerability

Vulnerable URL:...

eastpak.aegeanair.com Open Redirect vulnerability

Vulnerable URL: http://eastpak.aegeanair.com/BannerClick.php?BannerID=2=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

tfile.co XSS vulnerability

Vulnerable URL: http://tfile.co/forum/viewforum.php?f=37=%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

rollernco.com XSS vulnerability

Vulnerable URL: http://rollernco.com/search.php?orderby=position=descquery=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

PT-2016-6852

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Mediation Fulfillment HCM-F versions 10.63 and earlier Description A directory traversal issue in the web interface allows remote attackers to write to arbitrary files by using a crafted URL. Recommendations For...

CVE-2016-6371: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment HCM-F 10.63 and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717...

PT-2016-6851

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Mediation Fulfillment HCM-F versions 10.63 and earlier Description A directory traversal issue exists in the web interface, allowing remote authenticated users to read arbitrary files by crafting a pathname in an HTT...

escolifesciences.eu XSS vulnerability

Vulnerable URL: http://escolifesciences.eu/request-product.php?id=4 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6682312 VIP website status:| No Check escolifesciences.eu SSL...

dj-maza.info XSS vulnerability

Vulnerable URL: http://dj-maza.info/music/view.php?cat=hindi Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 115557 VIP website status:| No Check...

metrika.ru XSS vulnerability

Vulnerable URL: http://metrika.ru/search/?q=%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E=+ Details: Description| Value ---|--- Patched:| Yes, at 10.08.2017 Latest check for patch:| 10.08.2017 00:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

aidsmap.com XSS vulnerability

Vulnerable URL: http://www.aidsmap.com/en/Search-Results/page/1439377/?SearchText=qqqqq"=Search Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 127912 VIP...

tui.pl XSS vulnerability

Vulnerable URL:...

sherwoodscuba.com XSS vulnerability

Vulnerable URL: http://www.sherwoodscuba.com/search.php?zip=%22%3E%3Cscript+src%3Dhttps%3A%2F%2Fopenbugbounty.org%2F1.js%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1514926 V...

meretusa.com XSS vulnerability

Vulnerable URL: http://www.meretusa.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1596507 VIP website status:| No Check meretusa.com SSL connection:| Grade: F...

trusted-labs.com XSS vulnerability

Vulnerable URL: http://trusted-labs.com/%3Csvg%20onload=%22alert%28document.domain%29%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17167243 VIP website status:| No Check...

spb.metrika.ru XSS vulnerability

Vulnerable URL: http://spb.metrika.ru/search/?q=%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E=+ Details: Description| Value ---|--- Patched:| Yes, at 08.08.2017 Latest check for patch:| 08.08.2017 20:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...