theweblink.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.theweblink.co.uk/cgibin/loglink.cgi?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.10.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

info.bannersalesforce.com XSS vulnerability

Vulnerable URL: http://info.bannersalesforce.com/cs/idcplg?IdcService=GETSEARCHRESULTS=StandardResults=20=/cs/idcplg?IdcService=GETDYNAMICPAGEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"=indext=dInDate=Desc=XXXXXXXXXXXX==dInDate+%3E=+%60%3C$dateCurrent-7$%3E%60=OO Details: Description| Value ---|---...

genfair.co.uk XSS vulnerability

Vulnerable URL: https://www.genfair.co.uk/search.php?category=1%22%27--!%3E%3CScript%20/K/%3Econfirm%27openbugbounty%27%3C/Script%20/K/%3Ecounty==go=abc===score=Search Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

oraridiapertura24.it XSS vulnerability

Vulnerable URL: https://www.oraridiapertura24.it/cerca/start2?lat===aaaaa%22+onfocus%3Dprompt%28%2FOPENBUGBOUNTY%2F%29+autofocus%3Dx+bad%3D%22%3Eaa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=1=Cerca=Cosa%3F Details: Description| Value ---|--- Patched...

vcell.ndsu.nodak.edu XSS vulnerability

Vulnerable URL: http://vcell.ndsu.nodak.edu/animations/flash/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| No Latest chec...

vcharkarn.com XSS vulnerability

Vulnerable URL: http://www.vcharkarn.com/vcafe/search?searchkey=aaaaa%22+foo%3Dbar+autofocus%3Dx+bad%3D%22%3Eaa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.10.2017 Vulnerability type:| XSS...

map.lakala.com XSS vulnerability

Vulnerable URL:...

sin1-ib.adnxs.com Open Redirect vulnerability

Vulnerable URL: http://sin1-ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAACCF6kAAAAAAAAAAAAAAAAAAAAAObcvf5I2aAEL8u5sJiOAGkMYGBZAAAAAG5UAAxDAAAMQwAAAIAAAC1MCYEvkkLAAAAAABVU0QAQVVEANgCWgDZ7QAAAAAAAgQCAQAAAKgA6BYy3wAAAAA./cnd=/bn=/referrer=/clickenc=https%3A%2F%2Fwww.openbugbounty.org Details:...

horizonutilities.com XSS vulnerability

Vulnerable URL: https://www.horizonutilities.com/pages/default.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| Yes, at 16.10.2017 Latest check for patch:| 16.10.2017 13:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

October CMS 1.0.412 - Multiple Vulnerabilities

October CMS 1.0.412 - Multiple Vulnerabilities October CMS v1.0.412 several vulnerabilities Information =========== Name: October CMS v1.0.412 build 412 Homepage: http://octobercms.com Vulnerability: several issues, including PHP code execution Prerequisites: attacker has to be authenticated user...

October CMS 1.0.412 - Multiple Vulnerabilities

October CMS v1.0.412 several vulnerabilities Information =========== Name: October CMS v1.0.412 build 412 Homepage: http://octobercms.com Vulnerability: several issues, including PHP code execution Prerequisites: attacker has to be authenticated user with media or asset management permission CVE:...

October CMS Upload Protection Bypass Code Execution

This module exploits an Authenticated user with permission to upload and manage media contents can upload various files on the server. Application prevents the user from uploading PHP code by checking the file extension. It uses black-list based approach, as seen in...

October CMS 1.0.412 Code Execution / Shell Upload

October CMS v1.0.412 several vulnerabilities Information =========== Name: October CMS v1.0.412 build 412 Homepage: http://octobercms.com Vulnerability: several issues, including PHP code execution Prerequisites: attacker has to be authenticated user with media or asset management permission CVE:...

PT-2017-17116 · Bittorrent +1 · Qbittorrent +1

Name of the Vulnerable Software and Affected Versions: qBittorrent versions prior to 3.3.11 qBittorrent versions prior to the version released in October 2024 Description: The issue concerns a lack of proper escaping of values in the WebUI, potentially leading to XSS attacks. Additionally, there...

MS10-072: Description of the security update for Microsoft SharePoint Foundation 2010: October 12, 2010

MS10-072: Description of the security update for Microsoft SharePoint Foundation 2010: October 12, 2010 INTRODUCTION Microsoft has released security bulletin MS10-072. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS13-082: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: October 8, 2013

MS13-082: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: October 8, 2013 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could...

MS11-082: Description of the security update for Microsoft Host Integration Server 2009: October 11, 2011

MS11-082: Description of the security update for Microsoft Host Integration Server 2009: October 11, 2011 INTRODUCTION Microsoft has released security bulletin MS11-082. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

MS11-082: Description of the security update for Microsoft Host Integration Server 2010: October 11, 2011

MS11-082: Description of the security update for Microsoft Host Integration Server 2010: October 11, 2011 INTRODUCTION Microsoft has released security bulletin MS11-082. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

mysql: unspecified vulnerability in subcomponent: Server: GIS (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS...

mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.6.32 and earlier and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB...