hawkesburyriverrealestate.com.au XSS vulnerability

Open Bug Bounty ID: OBB-451399 Description| Value ---|--- Affected Website:| hawkesburyriverrealestate.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

Blue River Interactive Mura CMS XML External Entity Injection Vulnerability

Blue River Interactive Mura CMS is the United States Blue River Interactive company's set of CFML-based open source content management system CMS. The system supports user rights management , customizable templates and layouts , plug-in extensions and so on. A security vulnerability exists in the...

Malvertising on Equifax, TransUnion tied to third party script (updated)

Update 10-16-2017: More information regarding the third-party script fireclick.js and the domain it contacted netflame.cc was revealed by the Wall Street Journal. That domain once was used by Digital River Inc., an e-commerce and digital-marketing vendor, for a now-defunct web-analytics product...

Wind River Linux Version Detection

Binary data 700191.prm...

Hubei Radio and Television Station Yangtze River Cloud Android APP suffers from overstepping access vulnerability

Yangtze River Cloud Android APP is a news and information software created by Hubei Radio and Television Station, which integrates the three functions of government affairs, news and information, and life services. A vulnerability exists in the Hubei Radio and Television Changjiang Cloud Android...

Unauthorized Access Vulnerability in Shenzhen Yellow River Digital Histream Product Network Camera

Histream Network Camera provides customers with complete network video surveillance products and total solutions. Shenzhen Yellow River digital Histream products network camera has unauthorized access vulnerability, attackers can use the vulnerability to directly obtain the management user name a...

Mura CMS 7.0.6967 Cross Site Scripting

Credits =============== Zhao Liang, Huawei Weiran Labs Vendor: =============== Blue River Interactive Group Product: ======================== Mura CMS Mura CMS is built with one focused purpose in mind - to make it easier and faster for people to build and maintain even the most ambitious website...

charlesriver.com XSS vulnerability

Vulnerable URL: http://www.charlesriver.com/searchcaf.php?query=%22%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4588288 VIP...

CVE-2015-7599

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

Integer overflow

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

CVE-2015-7599

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

CVE-2015-7599

Wind River VxWorks CVE-2015-7599: Integer overflow in _authenticate (svc_auth.c) when RPC is enabled, enabling remote DoS and potential code execution. Affected versions: VxWorks 5.5–6.9.4.1. Public references in the connected docs show an RPC DoS exploit module (vxworks_rpc_dos) targeting VxWork...

vikingrivercruises.com XSS vulnerability

Vulnerable URL: http://www.vikingrivercruises.com/cruise-destinations/egypt/pathways-pharaohs/2017-cairo-nile-lakenasser/index.html?utmid='-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

gc.digitalriver.com Open Redirect vulnerability

Vulnerable URL: http://gc.digitalriver.com/store/playx/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:56 GMT Vulnerability type:| Open Redirect Vulnerability...

store.digitalriver.com Open Redirect vulnerability

Vulnerable URL: http://store.digitalriver.com/store/harperco/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

Stack overflow vulnerability in Wind River VxWorks

Summary: WindRiver is releasing mitigations for a privilege escalation issue. This issue affects versions of Wind River VxWorks products. The issue being mitigated is a method to execute arbitrary code without user interactions. Description: Anonymous remote attackers can cause a stack overflow,...

powellriverunitedchurch.com XSS vulnerability

Vulnerable URL: http://powellriverunitedchurch.com/photo.php?id=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

River Crossing IQ - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application River Crossing IQ published at the 'play' market has multiple vulnerabilities...

River Island - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application River Island published at the 'play' market has multiple vulnerabilities...

River Sounds Nature To Sleep - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application River Sounds Nature To Sleep published at the 'play' market has multiple vulnerabilities...