conservationevidence.com XSS vulnerability

Vulnerable URL:...

arhivach.org XSS vulnerability

Vulnerable URL: https://arhivach.org/add/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16022 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...

mightyit.co.nz XSS vulnerability

Vulnerable URL: http://www.mightyit.co.nz/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline...

pathlegal.in XSS vulnerability

Vulnerable URL: http://www.pathlegal.in/legallawhelp.php?main=property%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E==5543 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.08.2017 Vulnerability type:| XSS Vulnerability status...

Announcing the July ‘17 Release of Cb Defense

Editor's Note: If you are looking for the May 2017 Cb Defense release content, please scroll to the bottom of this page. This week, we’re happy to announce the rollout of the July ‘17 update of Cb Defense. Following the May ‘17 release, we heard a tremendous amount of positive feedback on the new...

HPE UCMDB 'UploadFileOnUIServerServlet' Servlet Path Handling RCE (HPESBGN03758)

The version of HP Universal Configuration Management Database Server UCMDB running on the remote web server is missing a security patch. It is, therefore, affected by a remote code execution vulnerability in the 'UploadFileOnUIServerServlet' servlet due to improper handling of user-supplied paths...

mulefactory.com XSS vulnerability

Vulnerable URL: https://www.mulefactory.com/buyfifa17coins%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 110232 VIP website status:| No Check mulefactory.com SSL connection:| Grade: A- Coordinate...

Adobe Flash Player APSB17-17 Multiple Use After Free Remote Code Execution Vulnerabilities

Description Adobe Flash Player is prone to multiple remote code-execution vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions...

Adobe Flash Player Use After Free Code Execution (APSB17-17: CVE-2017-3083)

A remote code execution vulnerability exists in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

Adobe Flash Player APSB17-17 Multiple Memory Corruption Vulnerabilities

Description Adobe Flash Player is prone to multiple memory-corruption vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologi...

How to use JavaScript array extensions integer overflow vulnerabilities in WebKit-a vulnerability warning-the black bar safety net

I will be in this article to tell you about the vulnerability, CVE-2017-2536/ZDI-17-358, which is a typical plastic overflow vulnerability, when the system is in the calculation of the allocated space size, the vulnerability will likely lead to a heap buffer overflow. We not only give you...

Threat Outbreak Alert RuleID29118: Email Messages Distributing Malicious Software on May 17, 2017

Medium Alert ID: 53865 First Published: 2017 May 17 17:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29118 may contain the following files: Name | Size...

tuinterfazdenegocios.com XSS vulnerability

Vulnerable URL: http://www.tuinterfazdenegocios.com/buscar.php?buscar="'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

CVE-2017-6982

creationtimestamp| type| source ---|---|--- 2017-05-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42014...

reseaumistral.com XSS vulnerability

Vulnerable URL: http://www.reseaumistral.com/ri/index.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 341663 VIP website status:| No Check reseaumistral.com SSL connection:|...

Session fixation

LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users by establishing a guest session...

CVE-2017-8900

LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users by establishing a guest session...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update D)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

Pwn2Own 2017: UAF in JSC::CachedCall (WebKit)

Pwn2Own 2017: UAF in JSC::CachedCall WebKit As a quick introduction, we are Samuel Groß, AKA saelo, and Niklas Baumstark, both students at Karlsruhe Institute of Technology, and have been playing CTF together for quite some time before we decided to team up for this year’s Pwn2Own. Today we are...

Apple Safari 10.0.3 - JSC::CachedCall Use-After-Free Exploit

Exploit for macOS platform in category remote exploits function makecompiledfunction function targetx return x5 + x - xx; // Call only once so that function gets compiled with low level interpreter // but none of the optimizing JITs target0; return target; function pwn var haxs = new Array0x100;...