DEBIAN-CVE-2014-3607

DefaultHostnameVerifier in Ldaptive formerly vt-ldap does not properly verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

ssl.akabou.jp XSS vulnerability

Open Bug Bounty ID: OBB-458212 Description| Value ---|--- Affected Website:| ssl.akabou.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Huawei DP300, TP3206 and ViewPoint 9030 Weak Encryption Algorithm Vulnerability

Huawei DP300, TP3206 and ViewPoint 9030 are all products of Huawei, China.DP300 is a video conferencing endpoint.TP3206 is a panoramic video conferencing solution.ViewPoint 9030 is a multipoint control unit for video conferencing systems. A weak encryption algorithm vulnerability exists in the...

CVE-2017-1000396

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. This library is widely used as a transitive dependency in Jenkins...

Circle with Disney Rclient SSL TLD MITM Vulnerability(CVE-2017-2911)

Summary An exploitable vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this...

Circle with Disney Goclient SSL TLD MITM Vulnerability(CVE-2017-2912)

Summary An exploitable vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this...

CVE-2017-2911

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate...

CVE-2015-1828

The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack...

archive.flsenate.gov XSS vulnerability

Vulnerable URL: http://archive.flsenate.gov/Statutes/Index.cfm?StatuteYear=2013=statutes"--!"=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

freewifirouter.com XSS vulnerability

Vulnerable URL: http://freewifirouter.com/!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4639879 VIP website...

Design/Logic Flaw

The RESTful control interface aka RAPI or ganeti-rapi in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2, when used in SSL mode, allows remote attackers to cause a denial of service resourc...

stockmoto.com XSS vulnerability

Vulnerable URL: http://www.stockmoto.com/search/?s=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 810740 VIP website status:| No Check stockmoto.com SS...

sslchecker.com XSS vulnerability

Vulnerable URL: https://www.sslchecker.com/sslchecker Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 05.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 242675 VIP website status:| No Check sslchecker.com SSL...

random-recordings.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.random-recordings.co.uk/go.php?id=244=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

xzaa.ru Open Redirect vulnerability

Vulnerable URL: http://xzaa.ru/go.php?id=11131=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 5425424 VIP website status:| No Check xzaa.ru S...

visceral.ru XSS vulnerability

Vulnerable URL: http://visceral.ru/search/?q=%27%7D%7D;%22%3E%7D;%7D;%7D--%3E%3C/SCRIPT%3E-%3C/style%3E-%3C/title%3E-%3C/BoDy%3E-%3Cmarquee%3E-%3Ch1%3EOmniGooch%3C/h1%3E-%3C/marquee%3E-%3Csvg/onload=alert%27XSSPOSED%27;%3E;%7B%7B%27 Details: Description| Value ---|--- Patched:| Yes, at...

KUKU - Schedule Instagram Post - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application KUKU - Schedule Instagram Post published at the 'play' market has multiple vulnerabilities...

cesanjosedepalmaritico.guaranda-sucre.gov.co XSS vulnerability

Vulnerable URL: http://www.cesanjosedepalmaritico.guaranda-sucre.gov.co/es/buscar?alsvbuscar=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E=Buscar Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Design/Logic Flaw

The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was changed to enable SSL logins, was "At the moment that is an accepted risk. We only...

gruporadialcontinental.com XSS vulnerability

Vulnerable URL: http://gruporadialcontinental.com/buscar.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...