998 matches found
Updated php & libgd packages fix security vulnerabilities
Potential infinite loop in gdImageCreateFromGifCtx php75571. Reflected XSS in .phar 404 page php74782...
PHP 5.6.x < 5.6.33 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.33. It is, therefore, affected by multiple vulnerabilities : - A potential infinite loop in gdImageCreateFromGifCtx. CVE-2018-5711 - A reflected XSS in .phar 404 page exists due to improper validati...
campuslifesecurity.com XSS vulnerability
Open Bug Bounty ID: OBB-418091 Description| Value ---|--- Affected Website:| campuslifesecurity.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Debian DLA-1166-2 : tomcat7 regression update
The update for tomcat7 issued as DLA-1166-1 caused a regressions whereby every request, including for the root document /, returned HTTP status 404. Updated packages are now available to address this problem. For reference, the original advisory text follows. When HTTP PUT was enabled e.g., via...
Tor: Report Regarding Security Vulnerability
Vulnerability description not provided...
etc.cl XSS vulnerability
Vulnerable URL: http://www.etc.cl/404/?p=%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 228201 VIP website status:| No Coordinate...
Monero: Monero Website & Kovri on your policy are returning 404 not found.
Hi Team, Issue The Monero Website are returning 404 not found. Please kindly check it Monero Website 404 response: F217540...
Cansina - Web Content Discovery Tool
Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering the responses t...
ownCloud: This is not the security issue.
Here a subdomain path: https://apps.owncloud.com/ a strange thing in this domain is that a new user can not create account but he can login in. On that path:- https://apps.owncloud.com/usermanager/new.php In this path registration file has been removed or something and saying 404 error. I mean wh...
Arachni v1.5.1 - Web Application Security Scanner Framework
Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. It is smart, it trains itself by monitoring and learning from the web application's behavior during the scan process and is...
Rockstar Games: dom based xss in https://www.rockstargames.com/GTAOnline/
In this report, the researcher found a DOM-Based XSS Vulnerability and was able to demonstrate an exploit that exposed cookie values. New 404 page handling code resulted in a fix for the issue...
kitto cross-site scripting vulnerability
kitto is an interactive dashboard framework written using Elixir. A cross-site scripting vulnerability exists in the kitto 404 page, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...
WordPress Total Security plugin <= 3.4 - Persistent Cross-Site Scripting (XSS) Vulnerability
With the 404 log feature is enabled, the function getRefe doesn't sanitize $SERVER'HTTPREFERER'. When the output is shown - the referer is not escaped. Solution Update the plugin...
CVE-2017-1000063
kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...
Information disclosure
kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...
CVE-2017-1000063
kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...
CVE-2017-1000063
The CVE-2017-1000063 entry affects kitto framework (kitto version 0.5.1) and is caused by a cross-site scripting (XSS) flaw on the 404 page. The vulnerability enables remote attackers to inject malicious script/HTML, which can be used to steal sensitive information or hijack user sessions when vi...
Cross site scripting
An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page...
