CVE-2017-10309

creationtimestamp| type| source ---|---|--- 2017-10-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43103...

Uniview - Remote Command Execution / Export Config (PoC)

STX Subject: Uniview RCE and export config PoC Researcher: bashis October 2017 Attack Vector: Remote Authentication: Anonymous no credentials needed Export config http://IP:PORT/cgi-bin/main-cgi?json="cmd":255,"szUserName":"","u32UserLoginHandle":-1 -tcpdump- check active capture...

colorway.com XSS vulnerability

Open Bug Bounty ID: OBB-369582 Description| Value ---|--- Affected Website:| colorway.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

deohoman.org XSS vulnerability

Open Bug Bounty ID: OBB-367690 Description| Value ---|--- Affected Website:| deohoman.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

alaskavu.fr XSS vulnerability

Open Bug Bounty ID: OBB-366420 Description| Value ---|--- Affected Website:| alaskavu.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

nowadays.ae XSS vulnerability

Open Bug Bounty ID: OBB-363920 Description| Value ---|--- Affected Website:| nowadays.ae Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

runetki.tv XSS vulnerability

Open Bug Bounty ID: OBB-363904 Description| Value ---|--- Affected Website:| runetki.tv Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

euwest1-beta-pix.dsp.io Open Redirect vulnerability

Open Bug Bounty ID: OBB-363185 Description| Value ---|--- Affected Website:| euwest1-beta-pix.dsp.io Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Shee...

DOS security vulnerability, October 2017

DOS security vulnerability, October 2017 Update 24-October-2017 Releases available Summary Updates are now available for all active Node.js release lines. These include the fix for the vulnerability identified in the initial announcement. We recommend that all users upgrade as soon as possible...

keramics.co.il XSS vulnerability

Open Bug Bounty ID: OBB-360658 Description| Value ---|--- Affected Website:| keramics.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

msh.dragonforms.com XSS vulnerability

Open Bug Bounty ID: OBB-360522 Description| Value ---|--- Affected Website:| msh.dragonforms.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

abola.pt XSS vulnerability

Open Bug Bounty ID: OBB-356132 Description| Value ---|--- Affected Website:| abola.pt Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Oracle Enterprise Manager Ops Center Remote Code Execution (October 2017 CPU)

The version of Oracle Enterprise Manager Ops Center installed on the remote host is missing a security patch. It is, therefore, affected by a remote code execution vulnerability. Refer to the October 2017 CPU for details on this vulnerability. TRUSTED...

myrebel.hillcollege.edu XSS vulnerability

Vulnerable URL: https://myrebel.hillcollege.edu/ICS?tool=search=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

oar.kashmiruniversity.ac.in XSS vulnerability

Vulnerable URL:...

adare.ireland.hostelhotel.cn XSS vulnerability

Vulnerable URL: http://adare.ireland.hostelhotel.cn/?page=%22%3E%3CScRipT%3Ealert%28666%29%3C%2FScrIpT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

e-hometutors.com XSS vulnerability

Open Bug Bounty ID: OBB-354817 Description| Value ---|--- Affected Website:| e-hometutors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pixelmonmod.com XSS vulnerability

Open Bug Bounty ID: OBB-353510 Description| Value ---|--- Affected Website:| pixelmonmod.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

MySQL 5.5.x < 5.5.58 Multiple Vulnerabilities (October 2017 CPU)

The version of MySQL running on the remote host is 5.5.x prior to 5.5.58. It is, therefore, affected by multiple vulnerabilities as noted in the October 2017 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note that Nessus has no...

Oracle E-Business Multiple Vulnerabilities (October 2017 CPU)

The version of Oracle E-Business installed on the remote host is 12.x.x prior to 12.2.8. It is, therefore, affected by multiple vulnerabilities as noted in the October 2017 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note tha...