1014 matches found
la-pleiade.fr XSS vulnerability
Vulnerable URL: http://www.la-pleiade.fr/searchengine/catalogue?searchText=%22%3E%3Csvg/onload=confirmOPENBUGBOUNTY%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 636988 VIP...
Challenges with Critical Infrastructure: IoT, Smart Cities Under Attack
Internet of Things technology is now more widespread than many people realize. Systems that fall under the IoT umbrella are popping up in an array of settings, even outside consumer circles. Today, every group from enterprise businesses to city governments is utilizing intelligent, internet- and...
Session Hijacking, Cookie-Stealing WordPress Malware Spotted
Researchers have identified a strain of cookie stealing malware injected into a legitimate JavaScript file, that masquerades as a WordPress core domain. Cesar Anjos, a security analyst at Sucuri, a firm that specializes in WordPress security, came across the malware during an incident response...
AntennaHouse DMC HTMLFilter Doc_SetSummary Code Execution Vulnerability
AntennaHouse DMC HTMLFilter DocSetSummary Code Execution Vulnerability Summary An exploitable heap corruption vulnerability exists in the DocSetSummary functionality of AntennaHouse DMC HTMLFilter. A specially crafted doc file can cause a heap corruption resulting in arbitrary code execution. An...
Shodan’ Malware Hunter to Expose Command & Control Centers of Botnets
By Jahanzaib Hassan Recorded Future, a threat intelligence company together with Shodan, which is an internet search engine connecting services to internet devices, have created an online crawler which they call the Malware Hunter. What does it do? The Malware Hunter is a program that sends out...
search.reimageplus.com XSS vulnerability
Vulnerable URL: http://search.reimageplus.com/?auto=〈=da'"/alert"openbugbounty"...
Media Search Engine SQL Injection
Exploit Title: Media Search Engine Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/media-search-engine-script/prod51.html Demo: http://www.websitescripts.org/demo/mediasearchengine/...
Media Search Engine Script - search Parameter SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Media Search Engine Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/media-search-engine-script/prod51.html Demo:...
Media Search Engine Script - 'search' SQL Injection
Exploit Title: Media Search Engine Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/media-search-engine-script/prod51.html Demo: http://www.websitescripts.org/demo/mediasearchengine/...
[SECURITY] Fedora 25 Update: drupal7-metatag-1.21-1.fc25
The Metatag module allows you to automatically provide structured metadata, aka "meta tags", about your website. In the context of search engine optimization, when people refer to meta tags they are usually referring to the meta description tag and the meta keywords tag that may help improve the...
[SECURITY] Fedora 24 Update: drupal7-metatag-1.21-1.fc24
The Metatag module allows you to automatically provide structured metadata, aka "meta tags", about your website. In the context of search engine optimization, when people refer to meta tags they are usually referring to the meta description tag and the meta keywords tag that may help improve the...
Metatag -Moderately Critical - Information disclosure - SA-CONTRIB-2017-019
This module enables you to add a variety of meta tags to a site for helping with a site's search engine results and to customize how content is shared on social networks. The module doesn't sufficiently protect against data being cached that might contain information related to a specific user...
Easy Web Search 3 SQL Injection
Exploit Title: Easy Web Search - PHP Search Engine with Image Search and Crawling System Script v3.0 - SQL Injection Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy:...
Easy Web Search 3 - 'id' SQL Injection
Exploit Title: Easy Web Search - PHP Search Engine with Image Search and Crawling System Script v3.0 - SQL Injection Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy:...
Netgear router password disclosure Vulnerability(CVE-2017-5521)
0x01 vulnerability overview NETGEAR is a United States well-known router manufacturers, its products are used worldwide extensively. Recently, foreign security researcher Simon Kenin find NETGEAR router more series there is a password leak Vulnerability, CVE-2017-5521-in. When the router Password...
Inout Search Engine Ultimate Edition 7.08.0 Script - Improper Access Restrictions
Inout Search Engine Ultimate Edition 7.08.0 Script - Improper Access Restrictions Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout Search Engine Ultimate Edition Script Script Version: v7.0, v8.0 Script Buy Now:...
Inout Search Engine Ultimate Edition 7.0/8.0 Script - Improper Access Restrictions
Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout Search Engine Ultimate Edition Script Script Version: v7.0, v8.0 Script Buy Now: http://www.inoutscripts.com/demo/inout-search-engine/demo/ Author: İhsan Şencan Author Web:...
searchenginewatch.com XSS vulnerability
Vulnerable URL: https://searchenginewatch.com/static/advertise?'alert/OPENBUGBOUNTY/...
Silverstripe Theme Newedge - Cross Site Web Vulnerability
A client-side cross site scripting web vulnerability has been discovered in the official Theme Newedge for Silverstripe content management system. Technical Details & Description: ================================ A client-side cross site scripting web vulnerability has been discovered in the...
RealEstate CMS 3.00.50 - Cross Site Web Vulnerability
RealEstate CMS is a web portal script designed for realty agents , realtor or brokers to sell , buy , trade , rent and letting their client's property through online. It is a web based Content Management System integrated web application platform developed in php, mysql used by real estate...