fhg.grannybet.com XSS vulnerability

Vulnerable URL: http://fhg.grannybet.com/pics/0101905/index.php?nats=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

advertolog.com XSS vulnerability

Vulnerable URL: http://www.advertolog.com/commercials/search/?x=0=0=999%22%3E%3Csvg/onload=prompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

berep.elections.il.gov XSS vulnerability

Vulnerable URL: https://berep.elections.il.gov/Leaving.aspx?URL=%22%20onmouseover=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

awards.rbc.ru XSS vulnerability

Vulnerable URL: http://awards.rbc.ru/nominees/rejting-rbc-25--prompt/XSSPOSED/...

Microsoft doesn’t want Windows 10 Users to Switch to Chrome or Firefox

Microsoft wants Windows 10 users to use its Edge browser, and the company is pulling every trick out to make it happen. In a newly leaked Windows 10 preview release build 10568, Microsoft has added a new prompt that appears whenever you try to switch away from default apps, including Microsoft...

Safari User-Assisted Applescript Exec Attack

In versions of Mac OS X before 10.11.1, the applescript:// URL scheme is provided, which opens the provided script in the Applescript Editor. Pressing cmd-R in the Editor executes the code without any additional confirmation from the user. By getting the user to press cmd-R in Safari, and by...

barilla.be XSS vulnerability

Vulnerable URL: http://www.barilla.be/befr/recettesmenus/Rechercherdesrecettes/searchricette.jsp?ingrediente=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=ingrediente+ingredientebarilla=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=Barilla-ricette-frbe=5=5 Details: Description|...

Bug in iOS and OSX Allows Writing of Arbitrary Files Via AirDrop

There is a major vulnerability in a library in iOS that allows an attacker to overwrite arbitrary files on a target device and, when used in conjunction with other techniques, install a signed app that the device will trust without prompting the user with a warning dialog. The vulnerability lies ...

Android Shellcode Telnetd with Parameters

/ Title: Android/ARM - telnetd with three parameters and an environment variable Date: 2015-07-31 Tested on: Android Emulator and Samsung Note 10.1 Android version 4.1.2 Author: Steven Padilla - email: email protected Organization: Tresys LLC Vendor HomePage: www.tresys.com Version: 1.0 Android A...

Updated firefox package fixes security vulnerability

Updated firefox packages fix security vulnerabilities: A flaw was found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox CVE-2015-4497. A flaw wa...

firefox: multiple issues

CVE-2015-4497 use-after-free when resizing canvas element during restyling: Mozilla community member Jean-Max Reymond discovered a use-after-free vulnerability with a canvas element on a page. This occurs when a resize event is triggered in concert with style changes but the canvas references...

USN-2723-1 firefox vulnerabilities

A use-after-free was discovered when resizing a canvas element during restyling in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with th...

CVE-2015-3729

Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not indicate what web site originated an input prompt, which allows remote attackers to conduct spoofing attacks via a crafted site...

CVE-2015-3729: Undefined Security Weakness

Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not indicate what web site originated an input prompt, which allows remote attackers to conduct spoofing attacks via a crafted site...

jazz.piezoelektric.org XSS vulnerability

Vulnerable URL: http://jazz.piezoelektric.org/?SEARCH=%27%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=record%3ALabels%3AG=1=1=jazz Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

ds36.ru XSS vulnerability

Vulnerable URL: http://www.ds36.ru/firms/?text=%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1783484 Google Pagerank| 1 VIP...

labastillasoluciones.com XSS vulnerability

Vulnerable URL: http://www.labastillasoluciones.com/inicio/galeria.php?titulo=Carpetas=42fotos=%27%22--%3E%3C/style%3E%3C/scRipt%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

Cisco Nexus Operating System Devices Command Line Interface Local Privilege Escalation Vulnerability

A vulnerability in the Command Line Interface CLI parser of Cisco Nexus Operating System NX-OS devices could allow an authenticated, local attacker to perform a privilege escalation. The vulnerability is due to improper input validation of special characters within filenames. An attacker could...

iOS latest vulnerability can be achieved“as real”iCloud password fishing-vulnerability warning-the black bar safety net

! Recently a security researcher has released an exploit code. This code suggests that the attacker can be through enough to fake spurious fishing, easily stolen using the latest version of iOS iCloud password. The vulnerability principle This proof-of-concept attacks using the iOS default email...

Z-blog at the front Desk without signing in contains a vulnerability a gold-bug warning-the black bar safety net

http://www.zblogcn.com/zblogphp/ download The problem occurs in zbinstall/index. php I also notice a bit after the installation is complete is to write what's prompt The results of the installation Create the database! zblog Connect to the database and create a data table! Create and insert data...