pricedekho.com XSS vulnerability

Open Bug Bounty ID: OBB-297821 Description| Value ---|--- Affected Website:| pricedekho.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ellikah.com XSS vulnerability

Vulnerable URL: http://ellikah.com/weekdayphoto.php?weekday=wednesdays%22%27--!%3E%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

KingScada AlarmServer 3.1.2.13 Buffer Overflow Exploit

This Metasploit module exploits a stack based buffer overflow found in KingScada versions prior to 3.1.2.13. The vulnerability is triggered when sending a specially crafted packet to the 'AlarmServer' AEserver.exe service listening on port 12401. During the parsing of the packet the 3rd dword is...

Alienvault OSSIM av-centerd Util.pm sync_rserver Command Execution

require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm syncrserver Command Execution', 'Description' = %q This module exploits a command injection vulnerability found within the syncrserver function in Util.pm. The vulnerability is triggered due to an incomplete blacklist...

Threat Outbreak Alert RuleID30600: Email Messages Distributing Malicious Software on September 14, 2017

Medium Alert ID: 55220 First Published: 2017 September 14 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30600 may contain the following files: Name ...

Motorola Netopia Netoctopus SDCS Stack Buffer Overflow

require 'msf/core' class MetasploitModule 'Motorola Netopia Netoctopus SDCS Stack Buffer Overflow', 'Description' = %q This module exploits a vulnerability within the code responsible for parsing client requests. When reading in a request from the network, a 32-bit integer is read in that specifi...

KingScada AlarmServer 3.1.2.13 - Remote Stack Buffer Overflow (Metasploit)

require 'msf/core' class MetasploitModule 'KingScada AlarmServer Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in KingScada 'James Fitts' , 'License' = MSFLICENSE, 'References' = 'CVE', '2014-0787' , 'ZDI', '14-071' , 'URL',...

KingScada AlarmServer 3.1.2.13 - Remote Stack Buffer Overflow (Metasploit)

KingScada AlarmServer 3.1.2.13 - Remote Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'KingScada AlarmServer Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in KingScada 'James Fitts' , 'License' = MSFLICENSE,...

EMC AlphaStor Library Manager < 4.0 build 910 - Opcode 0x4f Buffer Overflow (Metasploit)

require 'msf/core' class MetasploitModule 'EMC AlphaStor Library Manager Opcode 0x4f', 'Description' = %q This module exploits a stack based buffer overflow found in EMC Alphastor Library Manager version 'james fitts' , 'License' = MSFLICENSE, 'References' = 'URL',...

Alienvault OSSIM av-centerd - Util.pm sync_rserver Command Execution (Metasploit)

require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm syncrserver Command Execution', 'Description' = %q This module exploits a command injection vulnerability found within the syncrserver function in Util.pm. The vulnerability is triggered due to an incomplete blacklist...

Alienvault OSSIM av-centerd - Util.pm sync_rserver Command Execution (Metasploit)

Alienvault OSSIM av-centerd - Util.pm syncrserver Command Execution Metasploit require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm syncrserver Command Execution', 'Description' = %q This module exploits a command injection vulnerability found within the syncrserver...

Indusoft Web Studio - Directory Traversal Information Disclosure Exploit

Exploit for windows platform in category web applications require 'msf/core' class MetasploitModule 'Indusoft Web Studio Directory Traversal', 'Description' = %q This module exploits a flaw found in Indusoft Web Studio 'James Fitts' , 'License' = MSFLICENSE, 'Version' = '$Revision: $', 'Reference...

Alienvault OSSIM av-centerd Util.pm sync_rserver - Command Execution Exploit

Exploit for linux platform in category remote exploits require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm syncrserver Command Execution', 'Description' = %q This module exploits a command injection vulnerability found within the syncrserver function in Util.pm. The...

malmoairsoft.se XSS vulnerability

Vulnerable URL: http://malmoairsoft.se/search.php?searchstring=mastech%22%3E%3Csvg/onload=alert%28document.domain%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1618041 VIP...

husmanntschaeni.com XSS vulnerability

Open Bug Bounty ID: OBB-291271 Description| Value ---|--- Affected Website:| husmanntschaeni.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Blizzard Entertainment Hit With Weekend DDoS Attack

Blizzard Entertainment reported a crippling DDoS attack over the weekend creating chronic latency and connection issues for players of games Overwatch, World of Warcraft and others. The DDoS attack has since subsided, according to Blizzard, but users are still grousing on Twitter over lingering...

Threat Outbreak Alert RuleID30191: Email Messages Distributing Malicious Software on August 14, 2017

Medium Alert ID: 54837 First Published: 2017 August 14 15:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30191 may contain the following files: Name |...

Security update 2017-08-14

...

marionmunicipalcourt.org XSS vulnerability

Vulnerable URL: http://www.marionmunicipalcourt.org/cgi-bin/search.cgi Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 05.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4185093 VIP website status:| No Check...

mazurczak.de XSS vulnerability

Vulnerable URL: https://www.mazurczak.de/de/User-Action-Log-In Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2894543 VIP website status:| No Check mazurczak.de SSL connection:|...