CVE-2016-1617

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easie...

CVE-2016-1617

Removed by vendor...

hotelsdurhamnc.org XSS vulnerability

Vulnerable URL: http://hotelsdurhamnc.org/hotel.php?id=/hotel.php?id=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status...

UBUNTU-CVE-2016-1617

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easie...

Google to Speed Up Chrome for Fast Internet Browsing

Google is planning to make Chrome faster in order to provide its users fast Internet browsing experience. Thanks to a new, open-source data and web compression algorithm for the Internet called Brotli, which Google announced last year to boost its web page performance. With Brotli, Google will...

asebio.com XSS vulnerability

Vulnerable URL: http://www.asebio.com/en/tagelements.cfm?tag=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1215810 Google Pagerank| 0...

agroguide.nl Open Redirect vulnerability

Vulnerable URL: http://www.agroguide.nl/modules/babel/redirect.php?newlang=nlNL=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

cartovillage.com Open Redirect vulnerability

Vulnerable URL: http://www.cartovillage.com/click.php?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 20406936 Google Pagerank| 0 VIP website...

auto33.ru XSS vulnerability

Vulnerable URL: http://www.auto33.ru/car-credit?photo=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1442867...

chinaorchid.net Open Redirect vulnerability

Vulnerable URL: http://www.chinaorchid.net/asp/Adrotator/goto.asp?ID=14=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:17 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

aces.shu.ac.uk XSS vulnerability

Vulnerable URL: http://aces.shu.ac.uk/employability/index.php?k=15%22%3E%3Csvg/onload=confirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

yorkshire.com XSS vulnerability

Vulnerable URL: http://www.yorkshire.com/whats-on?date=20/01/2016=cool%22/onmouseover=confirm%28%27xssposed%27%29%20x==10 Details: Description| Value ---|--- Patched:| Yes, at 22.02.2016 Latest check for patch:| 22.02.2016 01:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

cruiselinesjobs.com Open Redirect vulnerability

Vulnerable URL: http://www.cruiselinesjobs.com/redirect.php?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 359558 Google Pagerank| 0 VIP website status:| No Check...

claroleague.co.uk XSS vulnerability

Vulnerable URL: http://claroleague.co.uk/ajax/getNextGameSmall.asp?teamname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

rpi-ekhn.de Open Redirect vulnerability

Vulnerable URL: http://www.rpi-ekhn.de/mail2date/ServiceCenter/redirect.php?url=https://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:37 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa...

vistaprint.nl Open Redirect vulnerability

Vulnerable URL: http://www.vistaprint.nl/add-coupon.aspx?redirect=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 75425 Google Pagerank| 0 VIP...

CVE-2015-8400

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

Hardcoded credentials

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

CVE-2015-8400

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

CVE-2015-8400

Shell In A Box (shellinabox) prior to version 2.19 contains an HTTPS fallback mechanism that allows DNS rebinding attacks via the /plain URL. The vulnerability is triggered when the client can revert HTTPS requests to HTTP, enabling remote attackers to exploit DNS rebinding. Public references in ...