CVE-2017-11578

CVE-2017-11578 affects the Blipcare wireless blood pressure monitor. The device exposes its web management interface over plain HTTP (non-SSL), allowing an attacker on the same wireless network to conduct a MITM and sniff the user’s Wi‑Fi credentials. The impact is disclosure of credentials witho...

USN-3724-1 evolution-data-server vulnerability

Jon Kristensen discovered that Evolution Data Server would automatically downgrade a connection to an IMAP server if the IMAP server did not support SSL. This would result in the user's password being unexpectedly sent in clear text, even though the user had requested to use SSL...

govcloudinsider.com XSS vulnerability

Vulnerable URL: https://govcloudinsider.com/Forms/Search-Results.aspx?query= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8100632 VIP website status:| No Check govcloudinsider.co...

vasechkin.ru Open Redirect vulnerability

Vulnerable URL: http://vasechkin.ru/go.php?http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 2580420 VIP website status:| No Check vasechkin.ru SSL...

fmtech.kr XSS vulnerability

Vulnerable URL: http://www.fmtech.kr/site/home/fmtechco/bbs.php/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E?id=analytical=ba3ce646c5a0a57a7769ddf7b240c944 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.10.2017 Vulnerability type:| XSS...

CVE-2017-11686

Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-SSL traffic on the network, because the password is represented in a cookie with a reversible encoding method...

Cross site scripting

Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-SSL traffic on the network, because the password is represented in a cookie with a reversible encoding method...

CVE-2017-11686

Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-SSL traffic on the network, because the password is represented in a cookie with a reversible encoding method...

fly-kan.com XSS vulnerability

Vulnerable URL: http://www.fly-kan.com/Products.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15937495 VIP website status:| No Check fly-kan.com SSL connection:| Grade: F...

looki.fr XSS vulnerability

Vulnerable URL: http://www.looki.fr/nomutilisateur.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 658810 VIP website status:| No Check looki.fr SSL connection:| Grade: B...

mytopfiles.com XSS vulnerability

Vulnerable URL: http://mytopfiles.com/search.php?ss=office/inurl:declarationmore.php?declid=%27%27%27%20and%20%27x%27=%27y%27"/Autofocus /Onfocus=confirmOPENBUGBOUNTY //' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...

3ex.asia XSS vulnerability

Vulnerable URL: http://www.3ex.asia/index/search?keyword="+autofocus+onfocus="alert'OPENBUGBOUNTY' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3553584 VIP website status:| No...

speaktomecatalog.com XSS vulnerability

Vulnerable URL: http://www.speaktomecatalog.com/search.php?q=%3Cscript%20src=https://openbugbounty.org/1.js%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5905593 VIP website...

rwa2an.net Open Redirect vulnerability

Vulnerable URL: http://www.rwa2an.net/vb/redirector.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 339131 VIP website status:| No Che...

mginaction.com XSS vulnerability

Vulnerable URL: http://www.mginaction.com/Search.aspx?Tag=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 800956 Google Pagerank| 3 VIP...

Potential vulnerability in the Intel® Driver Update Utility

Summary: This update to the Intel® Driver Update Utility mitigates the use of a non-SSL URL. Intel has released a new version of the software that provides mitigation of this issue. Description: Intel® Driver Update Utility analyzes Intel-product drivers on your computer and lets you know if driv...

billkorea.co.kr XSS vulnerability

Vulnerable URL: http://www.billkorea.co.kr/ebill/hanjunplaza/jsp/ErrMsg.jsp?txmsg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10481...

xl-shop.com XSS vulnerability

Vulnerable URL: http://www.xl-shop.com/xlshop/pages/displaymessage.asp?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 457047 Googl...

hunterapparelsolutions.com XSS vulnerability

Vulnerable URL: https://hunterapparelsolutions.com/hscni/designPage.asp?image=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11956265...

breakingnews.nationtv.tv XSS vulnerability

Vulnerable URL: http://breakingnews.nationtv.tv/home/read.php?newsid="';-- Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...