cash.org.hk XSS vulnerability

Vulnerable URL: http://www.cash.org.hk/en/index.php?main=3=24%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E⊂=35 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2328723...

thenorthface.it XSS vulnerability

Vulnerable URL: http://www.thenorthface.it/tnf-it-it/catalogsearch/result/?q=%27%29%2Balert%28%27XSSPOSED&store=tnf-it-it&fromstore=tnf-ie-en Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:53 GMT Vulnerability type:| XSS Vulnerability...

Threat Outbreak Alert RuleID18400: Email Messages Distributing Malicious Software on October 1, 2015

Medium Alert ID: 41313 First Published: 2015 October 1 15:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18400 may contain the following files: Name |...

Threat Outbreak Alert RuleID18388: Email Messages Distributing Malicious Software on October 01, 2015

Medium Alert ID: 41318 First Published: 2015 October 1 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18388 may contain the following files: Name |...

Threat Outbreak Alert RuleID18415: Email Messages Distributing Malicious Software on October 01, 2015

Medium Alert ID: 41325 First Published: 2015 October 1 15:06 GMT Last Updated: 2015 October 2 13:30 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18415 an...

geonames.org XSS vulnerability

Vulnerable URL: http://www.geonames.org/advanced-search.html?q=x==A=EU=0.6 Details: Description| Value ---|--- Patched:| Yes, at 30.09.2016 Latest check for patch:| 30.09.2016 18:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14443 Google Pagerank| 8 VIP...

October CMS build cross-site scripting vulnerability

October CMS is an open source, self-hosted content management system CMS built on the Laravel PHP framework developed by Canadian software developer Alexey Bobkov and Australian software developer Samuel Georges. A cross-site scripting vulnerability in October CMS build 271 and earlier allows...

Cross site scripting

Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image...

CVE-2015-5612

Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image...

CVE-2015-5612

Affected software: October CMS (build 271 and earlier). Vulnerability: cross-site scripting (XSS) via the caption tag of a profile image. Root cause: improper handling of caption tag leads to script/HTML injection. Impact: remote attacker can inject arbitrary script/HTML. Exploitation details are...

mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges...

mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB...

Oracle MySQL 5.6.x < 5.6.25 Multiple Vulnerabilities (July 2015 CPU) (October 2015 CPU)

The version of Oracle MySQL installed on the remote host is 5.6.x prior to 5.6.25. It is, therefore, affected by the following vulnerabilities : - Multiple denial of service vulnerabilities exist in the following subcomponents which can be exploited by a remote, authenticated attacker : - Partiti...

mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB...

mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges...

RHEL 5 : mysql55-mysql (RHSA-2015:1628)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1628 advisory. - mysql: unspecified vulnerability related to Server:InnoDB:DML CPU Jan 2015 CVE-2014-6568 - mysql: unspecified vulnerability related to...

Threat Outbreak Alert RuleID17299: Email Messages Distributing Malicious Software on October 6, 2015

Medium Alert ID: 40414 First Published: 2015 August 12 14:05 GMT Last Updated: 2015 October 7 12:47 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17299 an...

Threat Outbreak Alert RuleID16899: Email Messages Distributing Malicious Software on October 15, 2015

Medium Alert ID: 40116 First Published: 2015 July 23 19:14 GMT Last Updated: 2015 October 16 12:52 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16899 and...

Oracle E-Business Suite - XXE injection vulnerability

Application: E-Business Suite Vendor URL: Oracle Bugs: XXE injection Reported: 17.07.2015 Vendor response: 24.07.2015 Date of Public Advisory:20.10.2015 Reference: Oracle CPU Oct 2015 Authors: Nikita Kelesis, Ivan Chalykin, Alexey Tyurin ERPScan VULNERABILITY INFORMATION Class: XML External Entit...

Oracle E-Business Suite - XXE injection vulnerability

Application: E-Business Suite Vendor URL: Oracle Bugs: XXE injection Reported: 17.07.2015 Vendor response: 24.07.2015 Date of Public Advisory:20.10.2015 Reference: Oracle CPU Oct 2015 Authors: Nikita Kelesis, Ivan Chalykin, Alexey Tyurin ERPScan VULNERABILITY INFORMATION Class: XML External Entit...