nexweb15.nexsure.com XSS vulnerability

Vulnerable URL: https://nexweb15.nexsure.com/popups/minical.asp?element=EffDate=edits=1"...

Reflected Cross-Site Scripting Vulnerability in the usbkey_Serial Parameter of the Enterprise Intelligence Network Management System

Enterprise Intelligence products are intranet management expert services. A reflective cross-site scripting vulnerability exists in the usbkeySerial parameter of the Enterprise Intelligence network management system. It allows an attacker to construct an XSS statement to directly trigger a pop-up...

Mozilla Firefox MFSA Print Preview Spoofing Vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox. If pop-up windows are enabled, a malicious website may spoof the contents of the print preview window, causing users to confuse the currently loaded site...

Code injection

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...

CVE-2017-2371

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...

CVE-2017-2371

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...

CVE-2017-2371

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...

CVE-2017-2371: Improper Input Validation

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...

CVE-2017-2371

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...

PT-2017-15398

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2.1 Description An issue was discovered in certain Apple products, involving the WebKit component. This issue allows remote attackers to launch popups via a crafted web site. Recommendations For iOS versions prior to...

Google Chrome < 53.0.2785.113 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 53.0.2785.113. It is, therefore, affected by multiple vulnerabilities as referenced in the 201609stable-channel-update-for-desktop13 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113...

python-django cross-site scripting vulnerability

Django is the open source Python Web application development framework. A security vulnerability exists in Django incorrectly handling administrator add/change related popups. A remote attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2015-7518

Multiple cross-site scripting XSS vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via 1 global parameters, 2 smart class parameters, or 3 smart variables in the a host or b hostgroup edit forms...

Syrian Electronic Army Hacks UK based Media Websites

Syrian Electronic Army SEA, a pro-hacker group supposed to be aligned with Syrian President Bashar al-Assad has again gain media attention by compromising a number of popular news websites and displayed a Thanksgiving popups informing people that they've been hacked. The Forbes, The Independent,...

X (Formerly Twitter): XSS platform.twitter.com

Since you have fixed a few problems with the FlashTransport on platform.twitter.com already, I though I would also take a look at the JavaScript around it. Problem URL: https://platform.twitter.com/widgets/hub.html Description: The mentioned page opens URLs send to it via postMessage or...

Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups

No description provided by source. Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups Date: 2010-10-13 Author: berendjanwever Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11 Tested on: Windows XP sp3 HTML HEAD SCRIPT...

CVE-2012-2217

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote...

CVE-2012-2217

The CVE-2012-2217 entry concerns the HTC IQRD service on multiple HTC Android devices (e.g., EVO 4G, EVO Design 4G, Shift 4G, EVO 3D, EVO View 4G, Vivid, Hero) where localhost access to TCP port 2479 is not restricted. This allows remote attackers to perform actions via a crafted app with android...

Microsoft Internet Explorer JavaScript OnLoad Handler Code Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Design/Logic Flaw

The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the 1 Admin/, 2 Admin/Defaults/, 3 Admin/GettingStarted/, 4 Admin/Popups/, 5 AppThemes/, 6 Client/, 7 Client/Popups/, 8 Services/, 9 Temp/, 10 UserControls/, 11...