Cryptsetup Vulnerability Grants Root Shell Access on Some Linux Systems

A vulnerability in cryptsetup, a utility used to set up encrypted filesystems on Linux distributions, could allow an attacker to retrieve a root rescue shell on some systems. From there, an attacker could have the ability to copy, modify, or destroy a hard disk, or use the network to exfiltrate...

linksys.com Open Redirect vulnerability

Vulnerable URL:...

ATutor 2.2.2 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: ATutor2.2.2 Learning Management System Cross-Site Request Forgery Add New Course Date: 13-11-2016 Software Link: https://github.com/atutor/ATutor/releases/tag/atutor222 Vendor: http://www.atutor.ca/ Exploit Author: Saravana Kuma...

maaf.fr XSS vulnerability

Vulnerable URL: https://www.maaf.fr/assurances/custom/callback/servicesCallback.jsp?jsoncallback=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 53236 VIP website status:| No Check maaf.fr SSL connection:| Grad...

www-01.ibm.com XSS vulnerability

Vulnerable URL: http://www-01.ibm.com/software/analytics/learn-center/index.jsp?path=%27;alert%27OPENBUGBOUNTY%27;var%20x=%27// Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

pisni.org.ua XSS vulnerability

Vulnerable URL: http://www.pisni.org.ua/search.php?phrase=" autofocus onfocus="alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 107261 VIP website status:| No Check...

S9Y Serendipity 2.0.4 Cross Site Scripting

======================================== Title: Serendipity-2.0.4 latest version - Stored Cross Site Scripting Application: Serendipity Class: Sensitive Information disclosure Versions Affected: alert'Meryem ExploitDB' HTTP Request POST /serendipity/serendipityadmin.php? HTTP/1.1 Host: sitename...

minneapolis.mn.roway.net XSS vulnerability

Vulnerable URL: http://minneapolis.mn.roway.net/checkemail.php?email=%27%22%28%29%26%251%3CScRiPt%20%3Eprompt%28%2fOPENBUGBOUNTY%2f%29%3C%2fScRiPt%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:18 GMT Vulnerability type:| XSS Vulnerabili...

qualicore.de XSS vulnerability

Vulnerable URL: http://www.qualicore.de/redirect.php?link= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check qualicore.de SSL...

oec.fr XSS vulnerability

Vulnerable URL: http://www.oec.fr/modules.php?name=Sections=viewarticle=" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6557490 VIP website status:| No...

partners.crazyrewards.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-189138 Description| Value ---|--- Affected Website:| partners.crazyrewards.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

theledge.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-189032 Description| Value ---|--- Affected Website:| theledge.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

lolly14.blox.pl XSS vulnerability

Vulnerable URL: http://lolly14.blox.pl/?page=blogPublicSearch= blogPublicSearch'A Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

gazeta48.blox.pl XSS vulnerability

Vulnerable URL: http://gazeta48.blox.pl/html?page=blogPublicSearch= blogPublicSearch'A Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

etsycontest.com XSS vulnerability

Vulnerable URL: http://etsycontest.com/share.php?daylimit=7=="=price=price===100=0=recent Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11016901 VIP website status:| No Check...

mebeli.me XSS vulnerability

Vulnerable URL: http://mebeli.me/%D0%A2%D1%8A%D1%80%D1%81%D0%B5%D0%BD%D0%B5?q=%22%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

dotCMS CAPTCHA Bypass Vulnerability

Exploit for php platform in category web applications Title: CVE-2016-8600 dotCMS - CAPTCHA bypass by reusing valid code Credit: Elar Lang / https://security.elarlang.eu Vulnerability: CAPTCHA bypass by re-using last loaded valid CAPTCHA code Vulnerable version: before 3.6.0 CVE: CVE-2016-8600...

Leftover Factory Debugger Doubles as Android Backdoor

A leftover factory debugger in Android firmware made by Taiwanese electronics manufacturer Foxconn can be flipped into a backdoor by an attacker with physical access to a device. The situation is a dream for law enforcement or a forensics outfit wishing to gain root access to a targeted device...

greymouthpetroleum.co.nz XSS vulnerability

Vulnerable URL: http://www.greymouthpetroleum.co.nz/signup.php?company="=Truck Driver=2016-05-13=2016-05-13 17:01:58=No Details: Description| Value ---|--- Patched:| Yes, at 16.07.2017 Latest check for patch:| 16.07.2017 22:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

webasyst.ru XSS vulnerability

Vulnerable URL: https://www.webasyst.ru/blog/?query=" Details: Description| Value ---|--- Patched:| Yes, at 15.10.2017 Latest check for patch:| 15.10.2017 06:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 73774 VIP website status:| No Check webasyst.ru SSL...