CVE-2016-0145

creationtimestamp| type| source ---|---|--- 2016-04-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39743 2026-07-29 12:01:22+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:52+00:00| seen|...

onlytablet.com XSS vulnerability

Vulnerable URL: http://www.onlytablet.com/tagproducts.php?idtag=%27%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E=USD Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

glamorousjewelers.com XSS vulnerability

Vulnerable URL: http://glamorousjewelers.com/tagproducts.php?idtag=%27%22%3E%3Cmarquee/onstart=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2218102...

PCMan FTP Server 2.0.7 - 'RENAME' Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Original Exploit Information Date: 29 Aug 2015 Exploit Author: Koby Tested on: Windows XP SP3 Link: https://www.exploit-db.com/exploits/38013/ Software Information Vendor...

mbwin.net IFRAME Injection vulnerability

Vulnerable URL: http://www.mbwin.net/index.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 16489204 VIP website status:| No Check...

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (2D)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue...

marketing.fte.com XSS vulnerability

Vulnerable URL: http://marketing.fte.com/acton/fs/blocks/showLandingPage/a/2694/p/p-0005/t/page/fm/0?s=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

arthur-conan-doyle.com XSS vulnerability

Vulnerable URL: https://www.arthur-conan-doyle.com/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.04.2016 Latest check for patch:| 21.04.2016 20:11 GMT Vulnerability type:| XSS...

sciroccocentral.co.uk XSS vulnerability

Vulnerable URL: http://www.sciroccocentral.co.uk/roccopedia/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...

Oracle Java SE Multiple Vulnerabilities (April 2016 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 91, 7 Update 101, or 6 Update 115. It is, therefore, affected by security vulnerabilities in the following subcomponents : - 2D - Deployment - Hotspot - JAXP - JCE - JMX - Security -...

Oracle Java SE Multiple Vulnerabilities (April 2016 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 91, 7 Update 101, or 6 Update 115. It is, therefore, affected by security vulnerabilities in the following subcomponents : - 2D - Deployment - Hotspot - JAXP - JCE - JMX - Security -...

Oracle Releases Security Bulletin

Oracle has released its Critical Patch Update for April 2016 to address 136 vulnerabilities across multiple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Oracle April...

eileendover.net XSS vulnerability

Vulnerable URL: http://www.eileendover.net/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...

app.xxlapps.de XSS vulnerability

Vulnerable URL:...

cardiotube.net Open Redirect vulnerability

Vulnerable URL: http://www.cardiotube.net/AdClick.axd?url=https://www.openbugbounty.org/=046ef4dc-b270-4ba3-a3e6-c2d54bc4c08a=766b9a02-1512-4e82-8232-a2178557871f=7fdcd425-950f-4f6d-8529-bbf6450514e5=beee90bb-5eba-42df-96b0-581eddc04ee1=af6d8d9c-acb6-4e7d-88e4-c6e08227b7bc Details: Description|...

pioneercarclub.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-146779 Description| Value ---|--- Affected Website:| pioneercarclub.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

bwc.ohio.gov Open Redirect vulnerability

Vulnerable URL: https://www.bwc.ohio.gov/browsers.aspx?ReturnURL=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

woutware.com XSS vulnerability

Vulnerable URL: https://www.woutware.com/Forum/Topic/1348/cadeditcontrol-localization?returnUrl=javascript:alert%28/OPENBUGBOUNTY/%29 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Security update 2016-04-12

...

Security update for flash-player (important)

flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2016-1019: Adobe Flash Player earlier allowed remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016...