contact.hamptonroads.com XSS vulnerability

Open Bug Bounty ID: OBB-260005 Description| Value ---|--- Affected Website:| contact.hamptonroads.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability in the kernel/events/core.c component of the operating system allows a hacker to increase their privileges.

The vulnerability in the kernel/events/core.c component of the Linux operating system exists due to insufficient checking of resource states when resources can be shared among different processes. Exploiting this vulnerability allows a malicious actor to enhance their privileges by using a...

universalspecialevents.com XSS vulnerability

Vulnerable URL: http://www.universalspecialevents.com/tickets/concertsFrame.php?value=1"...

CVE-2017-8895

creationtimestamp| type| source ---|---|--- 2017-06-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42282 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/backupexec/ssluaf.rb 2025-02-06 03:13:43+00:00| seen|...

heartlandscornwall.com XSS vulnerability

Vulnerable URL: http://www.heartlandscornwall.com/events.php?interest=2"alert"OPENBUGBOUNTY"...

plazamexico.com XSS vulnerability

Vulnerable URL: http://www.plazamexico.com/events.php?y=1/-///'/"//--...

thebarclay.org XSS vulnerability

Vulnerable URL: http://www.thebarclay.org/explore-events.asp?n=1/-///'/"//--...

CVE-2016-9651

creationtimestamp| type| source ---|---|--- 2017-06-14 12:00:21+00:00| published-proof-of-concept| https://t.me/secharvester/69 2019-01-09 22:23:31+00:00| seen| https://t.me/cibsecurity/1953 2019-01-16 17:12:40+00:00| seen| https://t.me/cibsecurity/2063...

Roche Events - Corrupted files, Dangerous filesystem permissions, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Roche Events published at the 'play' market has multiple vulnerabilities...

WMI Event Subscription Process Persistence

This module will create a permanent WMI event subscription to achieve file-less persistence using an event filter that triggers the payload when the specified process is started. Additionally a custom command can be specified to run once the trigger is activated using the advanced option...

WebKit enqueuePageshowEvent / enqueuePopstateEvent Universal XSS(CVE-2017-2510)

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with pageshow events. He...

WebKit - enqueuePageshowEvent enqueuePopstateEvent Universal Cross-Site Scripting

WebKit - enqueuePageshowEvent enqueuePopstateEvent Universal Cross-Site Scripting view-frame.page; frame.tree.appendChildchildFrame-view-frame; childFrame-open; enqueuePageshowEventPageshowEventPersisted; HistoryItem historyItem = frame.loader.history.currentItem; if historyItem &&...

WebKit - 'enqueuePageshowEvent' / 'enqueuePopstateEvent' Universal Cross-Site Scripting

view-frame.page; frame.tree.appendChildchildFrame-view-frame; childFrame-open; enqueuePageshowEventPageshowEventPersisted; HistoryItem historyItem = frame.loader.history.currentItem; if historyItem && historyItem-stateObject mdocument-enqueuePopstateEventhistoryItem-stateObject;...

CVE-2017-8379

Memory leak in the keyboard input event handlers support in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service host memory consumption by rapidly generating large keyboard events...

CVE-2017-8379

Memory leak in the keyboard input event handlers support in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service host memory consumption by rapidly generating large keyboard events...

DEBIAN-CVE-2017-2510

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with pageshow events...

CVE-2017-2510

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with pageshow events...

CVE-2017-2510

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with pageshow events...

The vulnerability in the kernel/events/core.c component of the Android operating system allows a hacker to increase their privileges.

The vulnerability of the kernel/events/core.c component of the Android operating system’s kernel is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by using the functions perfpmuregister and...

miamidade.gov XSS vulnerability

Vulnerable URL: http://miamidade.gov/wps/Events/EventDetail.jsp?eventID=448733"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 33117 VIP website status:| Yes Check miamidade.go...