mon-01.econ.duke.edu XSS vulnerability

Open Bug Bounty ID: OBB-678119 Description| Value ---|--- Affected Website:| mon-01.econ.duke.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Leader of DDoS-for-Hire Gang Pleads Guilty to Bomb Threats

A 19-year-old man from the United Kingdom who headed a cybercriminal group whose motto was "Feds Can't Touch Us" pleaded guilty this week to making bomb threats against thousands of schools. On Aug. 31, officers with the U.K.'s National Crime Agency NCA arrested Hertfordshire resident George...

dukestores.duke.edu XSS vulnerability

Open Bug Bounty ID: OBB-625496 Description| Value ---|--- Affected Website:| dukestores.duke.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

qtmodule.dcri.duke.edu XSS vulnerability

Open Bug Bounty ID: OBB-564793 Description| Value ---|--- Affected Website:| qtmodule.dcri.duke.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Huawei Duke-L09 Forensic Bypass Vulnerability

The Huawei Duke-L09 is a smartphone from the Chinese company Huawei Huawei. A forensic bypass vulnerability exists in the Huawei Duke-L09 "phone recovery" feature. The vulnerability is due to the device failing to reasonably implement the authentication feature. An attacker can exploit this...

finance.duke.edu XSS vulnerability

Vulnerable URL: https://finance.duke.edu/systems/glossary/index.php?pagenum=6%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=17%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E&&%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 05.01.2018 Latest check for...

CVE-2017-8166

Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone...

CVE-2017-8166

Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone...

Integer overflow

honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overflow vulnerability. The attacker sends a response message to the device, which contains an illegal length field, it could produce an intege...

CVE-2017-2717

CVE-2017-2717 affects Huawei Honor 8 Pro devices (Duke-L09C10B120 and earlier; Duke-L09C432B120 and earlier; Duke-L09C636B120 and earlier). Root cause: integer overflow caused by processing a response message with an illegal length field, potentially triggering a restart of the modem system. Impa...

CVE-2017-8166

Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone...

CVE-2017-2717: Integer Overflow or Wraparound

honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overflow vulnerability. The attacker sends a response message to the device, which contains an illegal length field, it could produce an intege...

CVE-2017-8166: Undefined Security Weakness

Huawei mobile phones Honor V9 with the software versions before Duke-AL20C00B195 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone...

WordPress UserPro 4.6.17 Authentication Bypass

Exploit Title: Userpro a WordPress Plugin a Authentication Bypass Google Dork: inurl:/plugins/userpro Date: 11.04.2017 Exploit Author: Colette Chamberland Wordfence, Iain Hadgraft Duke University Vendor Homepage: https://codecanyon.net/item/userpro-user-profiles-with-social-login/5958681?srank=9...

WordPress Userpro Plugin < 4.9.17.1 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Userpro – WordPress Plugin – Authentication Bypass Google Dork: inurl:/plugins/userpro Date: 11.04.2017 Exploit Author: Colette Chamberland Wordfence, Iain Hadgraft Duke University Vendor Homepage:...

Huawei Honor V9 App Lock Bypass Vulnerability

Huawei Honor V9 is a smartphone product from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei Honor V9 Duke-AL20C00B195. The vulnerability can be exploited by an attacker to bypass the app lock feature and use protected apps on the phone...

medschool.duke.edu XSS vulnerability

Vulnerable URL: https://medschool.duke.edu/search-results?asq='" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Valu...

dukepub.co.uk XSS vulnerability

Vulnerable URL:...

db.library.duke.edu XSS vulnerability

Open Bug Bounty ID: OBB-293538 Description| Value ---|--- Affected Website:| db.library.duke.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

scholars.duke.edu XSS vulnerability

Vulnerable URL: https://scholars.duke.edu/search?querytext=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...