CVE-2015-8400

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

CVE-2015-8400

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

CVE-2015-8400: Undefined Security Weakness

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

Mozilla Warns of SHA-1 Deprecation Side Effects

As promised, Mozilla officially began rejecting new SHA-1 certificates as of the first of the year. And as promised, there have been some usability issues. Mozilla yesterday said that some security scanners and antivirus products are keeping some from reaching HTTPS websites. “When a user tries t...

ownCloud: Mixed Active Scripting Issue on stats.owncloud.org

I have come across with a HTTPS security issue - compromises HTTPS security by loading images from non secure source in stats.owncloud.org Vulnerability Type: Mixed Active Scripting Issue Description: Mixed Active Content is content that has access to and can affect all or parts of the Document...

dual.by Open Redirect vulnerability

Vulnerable URL: http://dual.by/include/clickcounter.php?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:54 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

clashforce.com Open Redirect vulnerability

Vulnerable URL: http://www.clashforce.com/?action=outboundclick;url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:11 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2015-7410

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

Design/Logic Flaw

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2015-7410

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2015-7410

IBM CVE-2015-7410 affects IBM Sterling B2B Integrator 5.2 (Health Check tool). The vulnerability is due to cookies not being properly handled with HTTPS sessions, enabling cookie hijacking via MITM-type scenarios. Affected product/version: IBM Sterling B2B Integrator 5.2. Remediation/fix: apply t...

Design/Logic Flaw

Remote Artifact Loader RAL in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.2 does not properly use SSL for its HTTPS connection, which allows remote authenticate...

CVE-2015-7441

Remote Artifact Loader RAL in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.2 does not properly use SSL for its HTTPS connection, which allows remote authenticate...

CVE-2015-7410: Undefined Security Weakness

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

sedl.org XSS vulnerability

Vulnerable URL: https://www.sedl.org/cgi-bin/mysql/eplan/eplan.cgi Details: Description| Value ---|--- Patched:| Yes, at 12.01.2016 Latest check for patch:| 12.01.2016 17:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 232815 Google Pagerank| 6 VIP website...

spaceshare.kr XSS vulnerability

Vulnerable URL: https://spaceshare.kr/login/login.php?redirectUrl=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.03.2016 Latest check for patch:| 21.03.2016 09:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

nvcll.org Open Redirect vulnerability

Vulnerable URL: http://www.nvcll.org/Goto.asp?URL=https://www.xssposed.org/=1607 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| ...

fordpartsuk.com XSS vulnerability

Vulnerable URL: http://www.fordpartsuk.com/shop/search.php?keywords=derp I Я HERPИ DERP Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 255358 Google...

badjojo.com XSS vulnerability

Vulnerable URL: http://www.badjojo.com/?q=Star+Wars+german="recent=week Details: Description| Value ---|--- Patched:| Yes, at 29.03.2016 Latest check for patch:| 29.03.2016 06:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 59858 Google Pagerank| 3 VIP websit...

connect.bloomberg.com XSS vulnerability

Vulnerable URL: http://connect.bloomberg.com/Aprimo/etrack.aspx?DSN=a5487ab3b15de173=9a26cff48c8aac63=e8d7842613e1c04a1fbbb788ac89bba6=9a26cff48c8aac63=1=9a26cff48c8aac63=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 24.05.2016 Latest check for patch:| 24.05.2016...