CVE-2020-25276

An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the EST protocol, no revocation check is performed on that certificate. This vulnerability can only affect a system that has EST configured, uses client certificates to authenticate...

CVE-2020-25276: Improper Certificate Validation

An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the EST protocol, no revocation check is performed on that certificate. This vulnerability can only affect a system that has EST configured, uses client certificates to authenticate...

est-faucet.com Cross Site Scripting vulnerability OBB-1277338

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

parisestunjardin.unblog.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1189002 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

est-system.de XSS vulnerability

Open Bug Bounty ID: OBB-585343 Description| Value ---|--- Affected Website:| est-system.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

est-21.com XSS vulnerability

Open Bug Bounty ID: OBB-458585 Description| Value ---|--- Affected Website:| est-21.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

penthes-est-a-vous.ch XSS vulnerability

Vulnerable URL: http://www.penthes-est-a-vous.ch/fr/proceed-payment?id=Mjkz=Qmczd0o4aA%3D%3D Details: Description| Value ---|--- Patched:| Yes, at 24.12.2016 Latest check for patch:| 24.12.2016 17:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

est-direct.com XSS vulnerability

Vulnerable URL: https://est-direct.com/store/random.php?slide=%3C/script/%22--%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

EST: Driver™ - Corrupted files, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application EST: Driver™ published at the 'play' market has multiple vulnerabilities...

gironde-est.fff.fr XSS vulnerability

Vulnerable URL: http://gironde-est.fff.fr/competitions/php/recherche/0503rechercher.php Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Target System Solutions SQL Injection

. . | / / || | / |/ \ / \ / \ / \ \ | \ / // | / // | | Y \ \ |/|| /\ / /|| || / / /// /==A|B|H-H4ck3r== ================================================================ Exploit Title : Target System Soulutions SQL inj: vulnerable Google Dork : - Date : 1-3-2012 Author : donGOth | mm1337...

Unfixed XSS vulnerability at www.qu-est-ce-que.fr

Security researcher death-angel, has submitted on 04/10/2008 a cross-site-scripting XSS vulnerability affecting www.qu-est-ce-que.fr, which at the time of submission ranked 7623735 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2008. It ...

Microsoft Security Bulletin MS07-028 Vulnerability in CAPICOM Could Allow Remote Code Execution (931906)

Microsoft Security Bulletin MS07-028 Vulnerability in CAPICOM Could Allow Remote Code Execution 931906 Published: May 8, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use CAPICOM or BizTalk 2004 Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

Unfixed XSS vulnerability at www.christus-est-lumen.de

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.christus-est-lumen.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...