store.restaurantproducts.us XSS vulnerability

Open Bug Bounty ID: OBB-65252 Description| Value ---|--- Affected Website:| store.restaurantproducts.us Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

cyd.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-62776 Description| Value ---|--- Affected Website:| cyd.org.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Adobe Flash Player latest Vulnerability, CVE-2 0 1 5-3 0 4 4: The camera and microphone can be remote control-vulnerability warning-the black bar safety net

Researchers recently found that Adobe Flash Player some version vulnerability exists, an attacker could exploit the vulnerability can be by means of PC built-in camera and microphone for the user to be monitored. Vulnerability description The Flash Player configuration panel there is a list of...

Design/Logic Flaw

The USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used screen before prompting the user for login, which might allow physically proximate users to obtain banking account numbers and balances...

tntexpress.com.au XSS vulnerability

Open Bug Bounty ID: OBB-57310 Description| Value ---|--- Affected Website:| tntexpress.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

showdewebcams.com.ar XSS vulnerability

Open Bug Bounty ID: OBB-56732 Description| Value ---|--- Affected Website:| showdewebcams.com.ar Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Invoking Mozilla updater will load locally stored DLL files — Mozilla

Security researcher Holger Fuhrmannek reported that when the Mozilla updater is run directly, the updater will load binary DLL format files from the local working directory or from the Windows temporary directories. This occurs when it is run without the Mozilla Maintenance Service on Windows...

prev-immo.fr XSS vulnerability

Open Bug Bounty ID: OBB-54251 Description| Value ---|--- Affected Website:| prev-immo.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Windows Gather User Credentials (phishing)

This module is able to perform a phishing attack on the target by popping up a loginprompt. When the user fills credentials in the loginprompt, the credentials will be sent to the attacker. The module is able to monitor for new processes and popup a loginprompt when a specific process is starting...

XSS vulnerability in spacedirectory

Good morning, I wanted to tell you to run vulnerability tests confluence, thrown the same XSS vulnerabilities. Version tested: 5.4.4 What steps should I follow to fix their vulnerabilities? Or vulnerabilities will be resolved for you? I attached the vulnerabilities: 1 GET...

Windows batch parsing vulnerability-vulnerability warning-the black bar safety net

In this article before you begin, Please note that this is a very jumbled information security notices. Related to Windows control command identifier, I may have found a simple batch file to attack the BUG. This BUG is present in Windows 2 0 0 0 version more 6 4-bit and 3 2-bit machine, it is a...

openSUSE Security Update : bash (openSUSE-SU-2014:1226-1) (Shellshock)

bash was updated to fix a critical security issue, a minor security issue and bugs : In some circumstances, the shell would evaluate shellcode in environment variables passed at startup time. This allowed code execution by local or remote attackers who could pass environment variables to bash...

Google Chrome 31.0 XSS Auditor Bypass Vulnerability

Google chrome XSS auditor was found prone to a bypass when the user input passed though location.hash was being written to the DOM by using document.write property. Normally, XSS auditor checks XSS by comparing the request and response however, it also checks for request itself, if it contains an...

Check Point Software Firewall-1 3.0/1 4.0 Session Agent Impersonation Vulnerability

source: http://www.securityfocus.com/bid/1661/info A vulnerability exists in the Session Agent portion of Firewall-1, from Check Point. This vulnerability appears to affect all versions of the session agent prior to the one shipped in FW-1 4.1. The session agent listens on a Windows 9x or NT box...

Microsoft Windows NT/2000 cmd.exe CD Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6829/info The Windows NT and 2000 command prompt cmd.exe does not properly handle paths containing more than 256 characters. If the cd change directory command is used to change to a subdirectory resulting in a path with...

Roxio Toast 7 DejaVu Component PATH Variable Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19596/info Roxio Toast is prone to a local privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. As a result, local users may set their own search path for external applications tha...

Polycom HDX Telnet Authorization Bypass

No description provided by source. ======================================================================== = Polycom HDX Telnet Authorization Bypass = = Vendor Website: = www.polycom.com = = Affected Version: = Polycom HDX devices: = All releases prior to and including Commercial 3.0.5 = = Publi...

phpslash <= 0.8.1.1 - Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q ?php phpslash = 0.8.1.1 Remote Code Execution Exploit - - - - - - - - - - - - - - - - - - - - - - - - - RCE with no special rights guest. No special PHP conditions required. - - - - - - - - - - - - - - - - - - - - - - - - - 0 It was a private...

BakBone NetVault 7.1 - Local Privilege Escalation Exploit

No description provided by source. // ===== Start UnhideNetVaultServiceWindow.c ====== include stdio.h include windows.h int main void HWND hWnd; char szWindowName = C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe; printf Finding window %s\n, szWindowName ; hWnd = FindWindow...

Sudo 1.6.x Password Prompt Heap Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4593/info Sudo is a widely used Linux/Unix utility allow users to securely run commands as other users. Sudo is vulnerable to a heap overflow condition related to it's customizable password prompt feature. The nature of t...