mailer.hdfcbank.com XSS vulnerability

Vulnerable URL: http://mailer.hdfcbank.com/campaign/Dec16/TaxSavingGuide/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg==&cfwaftk=100562002O0AhTUZSis3FxO-2TaPZ0Cux4 Details: Description| Value ---|--- Patched:| Verification in progress...

rentmantra.com XSS vulnerability

Vulnerable URL: https://www.rentmantra.com/rent/?propertytype=1===page=15price=price==1=Noida=%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 22.10.2017 Vulnerability type:| XSS Vulnerability...

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

CVE-2017-9248

CVE-2017-9248 affects Progress Telerik UI for ASP.NET AJAX (and Sitefinity) prior to R2 2017 SP1 / 10.0.6412.0. The vulnerability lies in Telerik.Web.UI.dll handling of the Telerik.Web.UI.DialogParametersEncryptionKey and the MachineKey, enabling an attacker to defeat cryptographic protection and...

306.ch XSS vulnerability

Vulnerable URL: http://www.306.ch/lib/flash/player.swf?debug=alert%28%27XSSPO%20SED%27%29 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Live Dashboards for Demonstrating Remediation Progress

Is your security team working on the right things to make your organization safer today? How can you prove it with data? Knowing Versus Doing Knowing your threat exposure is only half the picture. The other half is knowing which actions to take with your vulnerability management solution to secur...

dailyprogress.com XSS vulnerability

Vulnerable URL: http://www.dailyprogress.com/starexponent/news/localnews'-alert'OPENBUGBOUNTY'-'/evhs-advanced-show-choir-students-work-with-award-winning-choreographer/article6c3360c2-8dd7-5b7f-9a3b-b4897170d06b.html/ Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

Unspecified vulnerability in Accellion FTA devices (CNVD-2017-07457)

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. An unspecified vulnerability exists in Accellion FTA devices versions prior to FTA912180. A remote attacker can exploit this...

Dan Geer: Cybersecurity, Humanity's Future "Conjoined"

Given the intertwinement of technology with communication, politics, economies and overall human progress, it seems to go hand-in-hand that cybersecurity must be elevated in parallel. Dan Geer, considered atop the food chain of security thinkers, said during last week’s Source Boston conference...

progress-index.com XSS vulnerability

Open Bug Bounty ID: OBB-216726 Description| Value ---|--- Affected Website:| progress-index.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

[SECURITY] Fedora 24 Update: python-tqdm-4.11.2-1.fc24

tqdm read taqadum, =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD means "progress" in Arabic. Instantly make your loops show a smart progress meter - just wrap any itera ble with "tqdmiterable", and you are done!...

[SECURITY] Fedora 25 Update: python-tqdm-4.11.2-1.fc25

tqdm read taqadum, =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD =EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BD means "progress" in Arabic. Instantly make your loops show a smart progress meter - just wrap any itera ble with "tqdmiterable", and you are done!...

progress-index.com XSS vulnerability

Open Bug Bounty ID: OBB-208591 Description| Value ---|--- Affected Website:| progress-index.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

MS11-025: Description of the security update for Visual Studio 2005 SP1: June 14, 2011

MS11-025: Description of the security update for Visual Studio 2005 SP1: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-025. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

tqdm Remote Code Execution Vulnerability

tqdm is a fast, scalable progress meter from Python. A remote code execution vulnerability exists in tqdm. An attacker can exploit this vulnerability to execute arbitrary code in the context of an affected application...

2481.com.au XSS vulnerability

Vulnerable URL:...

rruff.geo.arizona.edu XSS vulnerability

Vulnerable URL: http://rruff.geo.arizona.edu/AMS/result.php?author=Downs%20R%20T=%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 16.11.2016 Vulnerability type:| XSS Vulnerability status:| Publicly...

planetbike.com XSS vulnerability

Vulnerable URL: http://www.planetbike.com/search.php?keywords=+++++%22%3E%3C/title%3E%3C/script%3E%27%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E++search Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 22.11.2016 Vulnerability type:| XSS Vulnerability...

Cobalt Strike team Services is proof of the RCE vulnerability as soon as possible to upgrade to the latest version-bug warning-the black bar safety net

! Security customer reviews Some time ago Metasploit just broke deserialization vulnerability may lead to remote unauthorized execution of code today and broke the Cobalt Strike team Services RCE vulnerability, it appears that the security personnel in the use of these excellent open source tools...