baike.com XSS vulnerability

Vulnerable URL: http://www.baike.com/docClaimApply.do?action=showClaimDocApply=adya4cz%22onfocus%3d%22alert%28/OPENBUGBOUNTY/%29%22autofocus%3d%22rbo8n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

CVE-2017-6343

The vulnerability CVE-2017-6343 affects Dahua DHI-HCVR7216A-S3 devices and is realized via the web interface, enabling remote authentication bypass by using knowledge of the MD5 Admin Hash to gain login access without the password. Affected components include NVR firmware 3.210.0001.10, Camera fi...

GLSA-201702-19 : TigerVNC: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201702-19 TigerVNC: Buffer overflow A buffer overflow vulnerability in ModifiablePixelBuffer::fillRect in vncviewer was found. Impact : A remote attacker, utilizing a malicious VNC server, could execute arbitrary code with the...

wildboerse.de XSS vulnerability

Open Bug Bounty ID: OBB-210500 Description| Value ---|--- Affected Website:| wildboerse.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID27319: Email Messages Distributing Malicious Software on January 19, 2017

Medium Alert ID: 52361 First Published: 2017 January 19 16:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27319 may contain the following files: Name |...

druni.es XSS vulnerability

Vulnerable URL: http://www.druni.es/catalogsearch/result/?o=AA=UUU Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 176398 VIP website status:| No Check druni.es SSL connection:|...

travel-forever.de Open Redirect vulnerability

Vulnerable URL: http://www.travel-forever.de/goto/http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 2232995 VIP website status:| No Check...

littlesuttoncarcentre.co.uk XSS vulnerability

Vulnerable URL: http://www.littlesuttoncarcentre.co.uk/searchpage.php?model=Anymodel=h=2' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15776888 VIP website status:| No Check littlesuttoncarcentre.co.uk SSL...

alcottelementary.net XSS vulnerability

Vulnerable URL: http://www.alcottelementary.net/apps/account/profile.jsp?activationForwardURL=--%3E%22%3E%3C/a%3E%3C/script%3E%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability...

GLSA-201701-19 : NTFS-3G: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201701-19 NTFS-3G: Privilege escalation NTFS-3G is affected by the same vulnerability as reported in GLSA 201603-04 when the bundled fuse-lite implementation is used. Impact : A local user could gain root privileges. Workaround :...

Threat Outbreak Alert RuleID26871: Email Messages Distributing Malicious Software on December 19, 2016

Medium Alert ID: 52165 First Published: 2016 December 20 15:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26871 may contain the following files: Name |...

Threat Outbreak Alert RuleID26936: Email Messages Distributing Malicious Software on December 19, 2016

Medium Alert ID: 52160 First Published: 2016 December 19 16:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26936 may contain the following files: Name |...

tinyurl.com XSS vulnerability

Vulnerable URL: http://tinyurl.com/create.php?source=indexpage=https%3A%2F%2Fwww.regions.com%2FInsights%2FSearchInsights%3FsearchTerm%3D%22%3E%3Csvg%2Fonlo+ad%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=Make+TinyURL%21= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017...

emeroteca.braidense.it XSS vulnerability

Vulnerable URL: http://emeroteca.braidense.it/indicetestate.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Security update for qemu (important)

qemu was updated to fix 19 security issues. These security issues were fixed: - CVE-2016-2392: The isrndis function in the USB Net device emulator hw/usb/dev-network.c in QEMU did not properly validate USB configuration descriptor objects, which allowed local guest OS administrators to cause a...

Threat Outbreak Alert RuleID25740: Email Messages Distributing Malicious Software on October 19, 2016

Medium Alert ID: 49346 First Published: 2016 October 19 15:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25740 may contain the following files: Name |...

truwindows.com XSS vulnerability

Vulnerable URL: http://truwindows.com/common/sifr/avenir.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

satom.ru XSS vulnerability

Vulnerable URL: http://satom.ru/t/osennie-tovary-13150/?" Details: Description| Value ---|--- Patched:| Yes, at 17.03.2017 Latest check for patch:| 17.03.2017 07:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 46894 VIP website status:| Yes Check satom.ru SSL...

Threat Outbreak Alert RuleID24981: Email Messages Distributing Malicious Software on September 19, 2016

Medium Alert ID: 48954 First Published: 2016 September 19 19:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24981 may contain the following files: Name ...

yorkpress.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-178100 Description| Value ---|--- Affected Website:| yorkpress.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...