5000 matches found
cybershimla.com XSS vulnerability
Open Bug Bounty ID: OBB-385332 Description| Value ---|--- Affected Website:| cybershimla.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
evsauto.com XSS vulnerability
Open Bug Bounty ID: OBB-385314 Description| Value ---|--- Affected Website:| evsauto.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
guidamaturita.it XSS vulnerability
Open Bug Bounty ID: OBB-385304 Description| Value ---|--- Affected Website:| guidamaturita.it Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
ogd.com XSS vulnerability
Open Bug Bounty ID: OBB-385202 Description| Value ---|--- Affected Website:| ogd.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
mnemonicdictionary.com XSS vulnerability
Open Bug Bounty ID: OBB-385167 Description| Value ---|--- Affected Website:| mnemonicdictionary.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Firefox 58 to Block Canvas Browser Fingerprinting By Default to Stop Online Tracking
Do you know? Thousands of websites use HTML5 Canvas—a method supported by all major browsers that allow websites to dynamically draw graphics on web pages—to track and potentially identify users across the websites by secretly fingerprinting their web browsers. Over three years ago, the concern...
Bad Rabbit Linked to ExPetr/Not Petya Attacks
A link has been confirmed between the Bad Rabbit ransomware outbreak detected yesterday in major organizations in Russia and Ukraine and this summer’s ExPetr/Not Petya attacks. Researchers at Kaspersky Lab said there are “clear ties” between the two attacks though one major piece of the puzzle is...
CVE-2017-7150
An issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is affected. The issue involves the "Security" component. It allows attackers to bypass the keychain access prompt, and consequently extract passwords, via a synthetic click...
CVE-2017-7150
An issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is affected. The issue involves the "Security" component. It allows attackers to bypass the keychain access prompt, and consequently extract passwords, via a synthetic click...
Polycom Command Shell Authorization Bypass
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Polycom Command Shell Authorization Bypass', 'Alias' = 'polycomhdxauthbypass', 'Author' = 'Paul Haas ', module 'h00die ', submission/cleanup ,...
Mozilla Firefox 55 - Denial of Service
Mozilla Firefox 55 - Denial of Service Exploit Title: Mozilla Firefox Firefox Lockout Vulnerability"; //Content to be forcibly viewed echo ""; //End echo "setTimeout"location.href ='".$location."';",10000;"; ? Solution: Update to version 55 https://www.mozilla.org/en-US/firefox/55.0/releasenotes/...
Mozilla Firefox < 55 - Denial of Service
Exploit Title: Mozilla Firefox Firefox Lockout Vulnerability"; //Content to be forcibly viewed echo ""; //End echo "setTimeout"location.href ='".$location."';",10000;"; ? Solution: Update to version 55 https://www.mozilla.org/en-US/firefox/55.0/releasenotes/ Mozilla Foundation Security Advisory:...
uta.edu XSS vulnerability
Vulnerable URL: http://www.uta.edu/ssw/news/releases/topics.php?tag=%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10785 VIP website status:| Yes...
shoplc.com XSS vulnerability
Vulnerable URL: https://www.shoplc.com/unbxdSearch/?topCatSearch=All=aaaaaaaaaaaaaaaaaa'-prompt/OPENBUGBOUNTY/-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 172361 VIP website...
Ian Dunn: Timing Attack in Google Authenticator - Per User Prompt
Google Authenticator - Per User Prompt contains a timing attack vulnerability in how it validates the application password for a user account. if sha1 $attemptedpasswordplaintext === $validpasswordhash || wpcheckpassword $attemptedpasswordplaintext, $validpasswordhash...
home.uchicago.edu XSS vulnerability
Open Bug Bounty ID: OBB-332125 Description| Value ---|--- Affected Website:| home.uchicago.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
arttodaygallery.com XSS vulnerability
Open Bug Bounty ID: OBB-331299 Description| Value ---|--- Affected Website:| arttodaygallery.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Secure Web Error Connection has timed out reconnect to Secure Home to access work resources.
When Secure Web for iOSislaunched. We receivean error right away "Your connection has timed out. Please reconnect to Secure Hub to access work resources "Cancel, connect. If users clicks connect it redirects back to Secure Hub, prompts users to enter PIN/password. Then it redirects back to Secure...
horloge.gratuite.online.fr XSS vulnerability
Vulnerable URL: http://horloge.gratuite.online.fr/GHv1/script.php?image=http://horloge.gratuite.online.fr/GHv1/img/04112011185736.gif=022=1=800000=1=FFDAB9="prompt/openbugbounty/...