CVE-2016-0634

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine...

EggShell - iOS/macOS Remote Administration Tool

EggShell is an iOS and macOS post exploitation surveillance pentest tool written in Python. This tool creates 1 line multi stage payloads that give you a command line session with extra functionality. EggShell gives you the power and convenience of uploading/downloading files, taking pictures,...

August 16, 2017—KB4034661 (OS Build 14393.1613)

None None...

symboltraining.edu XSS vulnerability

Vulnerable URL: https://www.symboltraining.edu/Portals/default/Skins/symbol/FlashPlayerControl/player.swf?tracecall=prompt%27openbugbounty%27 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:|...

UBUNTU-CVE-2017-7783

If a long user name is used in a username/password combination in a site URL such as " http://UserName:[email protected]", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...

CVE-2017-7783

If a long user name is used in a username/password combination in a site URL such as " http://UserName:[email protected]", the resulting modal prompt will hang in a non-responsive state or crash, causing a denial of service. This vulnerability affects Firefox 55...

PT-2017-17941

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 55 Description The issue occurs when a long user name is used in a username/password combination in a site URL, causing the resulting modal prompt to hang in a non-responsive state or crash. This results in a denial o...

git: git-prompt.sh does not sanitize branch names in $PS1

It was found that the git-prompt.sh script shipped with git failed to correctly handle branch names containing special characters. A specially crafted git repository could use this flaw to execute arbitrary commands if a user working with the repository configured their shell to include repositor...

XenMobile : Control OS update policy FAQ

Control OS policy The Control OS Updates device policy lets you deploy the latest OS updates to supervised iOS devices. You can specify how frequently XenMobile checks the device OS and deploys updates. ​There are two options -: 1. Download Only This option will just download OSupdate and custome...

swiftype.com XSS vulnerability

Vulnerable URL: https://swiftype.com/searchstq=%27%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C/script%3E=1 Details: Description| Value ---|--- Patched:| Yes, at 31.07.2017 Latest check for patch:| 31.07.2017 12:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

avkvalves.se XSS vulnerability

Vulnerable URL: http://www.avkvalves.se/sv-se/searchresults?search=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

reportworld.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-259891 Description| Value ---|--- Affected Website:| reportworld.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

filodiretto.it XSS vulnerability

Vulnerable URL: https://www.filodiretto.it/site/res/asp/prompthelp.asp?From=1"...

USB Devices prompting to connect on each session

USB devices prompting to connect on each session:...

sport.tv2.dk XSS vulnerability

Vulnerable URL: http://sport.tv2.dk/2017-06-29-wozniacki-halep/%3C/script%3E%3Csvg/onload=prompt%60openbugbounty%60%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...

Security fix for the ALT Linux 9 package openvpn version June

June 21, 2017 Nikolay A. Fetisov 2.4.3-alt1 - New version - Security fixes: + CVE-2017-7522 Post-authentication --x509-track remote DoS + CVE-2017-7521 Post-authentication remote-triggerable memory leaks + CVE-2017-7521 Potential post-authentication remote code execution on servers that use the...

Clicking Outlook 2016 search field prompts for install and hangs

Every time the search field in Outlook 2016 is clicked on in an elastically layered image, a prompt for credentials is displayed and an installer launches & hangs. This completely disables the search functionality of Outlook. This error can also occur on Outlook 2013...

personeriaelpinonmagdalena2013.gov.co XSS vulnerability

Open Bug Bounty ID: OBB-246047 Description| Value ---|--- Affected Website:| personeriaelpinonmagdalena2013.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score...

hustlerslesbians.com XSS vulnerability

Vulnerable URL: http://www.hustlerslesbians.com/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3EMC4wLjkuOS4wLjAuMC4wLjA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

USN-3294-1 bash vulnerabilities

Bernd Dietzel discovered that Bash incorrectly expanded the hostname when displaying the prompt. If a remote attacker were able to modify a hostname, this flaw could be exploited to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. CVE-2016-0634...