Internet Bug Bounty: Type Confusion in WDDX Packet Deserialization

https://bugs.php.net/bug.php?id=71335...

Internet Bug Bounty: UAF in xmlparser_setevents (2)

https://bugs.python.org/issue24104...

christlc.net XSS vulnerability

Vulnerable URL: http://christlc.net/search.php?pageID=search=%3Cscript+src%3Dhttps%3A%2F%2Fxssposed.org%2F1.js%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10162586 Google...

openSUSE Security Update : openldap2 (openSUSE-2016-92) (Logjam)

This update fixes the following security issues : - CVE-2015-6908: The bergetnext function allowed remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd. bsc945582 - CVE-2015-4000: Fix weak...

wiley-vch.de XSS vulnerability

Vulnerable URL: http://www.wiley-vch.de/sachbuch/biographien.php?sID=ttug3j1ssb5qndsjg18ou88m75=" Details: Description| Value ---|--- Patched:| Yes, at 28.12.2016 Latest check for patch:| 28.12.2016 12:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 163106...

Internet Bug Bounty: Heapoverflow in zipimporter module

https://bugs.python.org/issue26171...

aaf-rdu.org Open Redirect vulnerability

Vulnerable URL: http://www.aaf-rdu.org/clicktrack/?b=7486cd3d-e8da-454e-ac52-a41745f32cb0=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:25 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

Linux Kernel Vulnerability

US-CERT is aware of a Linux kernel vulnerability affecting Linux PCs and servers and Android-based devices. Exploitation of this vulnerability may allow an attacker to take control of an affected system. US-CERT recommends that users and administrators review the Redhat Security Blog and the Debi...

moebel-massiv.com XSS vulnerability

Vulnerable URL: https://www.moebel-massiv.com/?ActionCall=WebActionArticleSearch=0=60id=1class=6SearchInDescription=1SearchParam=asd"-alert"XSSPOSED"-"search.x=0search.y=0 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:46 GMT Vulnerability...

cis.edu.sg XSS vulnerability

Vulnerable URL: http://www.cis.edu.sg/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 11.04.2016 Latest check for patch:| 11.04.2016 15:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1002696 Google...

Someone Just Leaked Hard-Coded Password Backdoor for Fortinet Firewalls

Are millions of enterprise users, who rely on the next-generation firewalls for protection, actually protected from hackers? Probably Not. Just less than a month after an unauthorized backdoor found in Juniper Networks firewalls, an anonymous security researcher has discovered highly suspicious...

carvan.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-122594 Description| Value ---|--- Affected Website:| carvan.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wiki.hobowars.com XSS vulnerability

Vulnerable URL: http://wiki.hobowars.com/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

morrissuntribune.com XSS vulnerability

Vulnerable URL: http://www.morrissuntribune.com/marketplaceoffers/category/Home%20Improvement%3Cimg%20src=x%20onerror=alert%28'XSSPOSED'%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 22:26 GMT Vulnerability type:| XSS Vulnerability...

Lockscreen delay bypass in Firefox OS — Mozilla

Frederik Braun of Mozilla discovered a bug in the lockscreen state logic that allows an attacker to bypass the lockscreen delay. The delay was introduced to make it harder to brute-force the passcode lock of a Firefox OS device when an attacker has gained physical access. A successful attack woul...

a-league.ge XSS vulnerability

Vulnerable URL: http://a-league.ge/ge/allgal.php?cat=23=2411'"/alert/xssposed/...

kanazuen.awa-nav.com Open Redirect vulnerability

Vulnerable URL: http://kanazuen.awa-nav.com/rank.php?mode=link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

Shopify: "Remember me" token generated when "Remember me" box unchecked

Hi, This is a weird behaviour which regenerates secureadminsessionid cookie Steps to Reproduce : 1. Navigate to https://www.shopify.com/login 2. Enter credentials 3. Enter two factor code from authenticator Check cookie, There should be cookie named userauthtoken. I believe this token is...

richdad.com XSS vulnerability

Vulnerable URL: http://www.richdad.com/CMSModules/BannerManagement/CMSPages/BannerRedirect.ashx?bannerID=94=data:text/html;base64,PHNjcmlwdD5hbGVydCgvWFNTUE9TRUQvKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| Yes, at 10.03.2016 Latest check for patch:| 10.03.2016 07:59 GMT...

myhockeystore.com XSS vulnerability

Vulnerable URL: http://www.myhockeystore.com/requestitem.php?itemname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 10:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...