abigail-jones-art.co.uk XSS vulnerability

Vulnerable URL: http://www.abigail-jones-art.co.uk/shop/search.php?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 06.12.2015 Latest check for patch:| 06.12.2015 08:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

epost.ca XSS vulnerability

Vulnerable URL: https://www.epost.ca/service/landingPage.a?name=9423446773=" Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17250 Google Pagerank| 6 VIP...

xn--barnmbel-r4a.se XSS vulnerability

Open Bug Bounty ID: OBB-100146 Description| Value ---|--- Affected Website:| xn--barnmbel-r4a.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Information disclosure

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests...

CVE-2015-7682: Multiple Blind SQL Injections in Pie Register WordPress Plugin

Details ================ Software: Pie Register Version: 2.0.18 Homepage: https://github.com/GTSolutions/Pie-Register CVE: CVE-2015-7682 Pending CVSS: 3.5 Low; AV:N/AC:M/Au:S/C:P/I:N/A:N CWE: CWE-89 Description ================ Two blind SQL injection vulnerabilities in Pie Register 2.0.18 allow...

Correction: BMC-2015-0006: File inclusion vulnerability caused by misconfiguration of "BIRT Engine" servlet as used in BMC Remedy AR Reporting

Enigmail: ????? ????? ????????? ?? ???? ??????????? ??? ????????? Errata: This is a correction of our previous disclosure email from September 23rd, 2015. Our previous posting implied that the security vulnerability we discovered was in the "BIRT Engine" servlet itself. This is NOT the case, but...

moovly.com XSS vulnerability

Vulnerable URL: https://www.moovly.com/en/reset-password/send-email Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 54972 Google Pagerank| 2 VIP website...

bcconsul.ru XSS vulnerability

Vulnerable URL: http://www.bcconsul.ru/bbs/user.php?EMAIL=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E=vjkjrj Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Researcher warns about Security Loopholes in Denmark's Largest Bank

While accessing your Bank account online, Have you ever thought… ...there could be a Hacker, somewhere in the World, who is after your Money? Maybe NO. Because, you believe that your bank offers Secure banking solution, Right? At The Hacker News, we have reported many incidents of cyber attacks,...

F5 BIG-IP 10.1.0 - Directory Traversal Vulnerability

Affected Product : F5 BIG-IP Vendor Homepage : http://www.f5.com/ Version : 10.1.0 Vulnerability Category : Local vulnerability Discovered by : Anastasios Monachos secuid0 - anastasiosm at gmail dot com CVE : CVE-2014-8727 Patched : Yes An authenticated user with either "Resource Administrator" o...

be.benetton.com XSS vulnerability

Vulnerable URL: http://be.benetton.com/shop/itit/catalogsearch/result/index/?color=216=desc="=123 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

ownCloud: demo.owncloud.org: HTTP compression is enabled potentially leading to BREACH attack

@pareshparmar reported the BREACH vulnerability on demo.owncloud.org. ownCloud has meanwhile disabled compression on the system. It should be noted that starting with ownCloud 8.2 the CSRF token is randomized for each request. As per request by the reporter this issue has only been disclosed...

D-Link DCS-2103 1.20 CSRF / Cross Site Scripting Vulnerabilities

Exploit for hardware platform in category web applications There are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities in D-Link DCS-2103 IP camera. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DCS-2103, Firmware...

Oracle WebCenter Portal Multiple Vulnerabilities (July 2015 CPU)

Binary data oraclewebcenterportaljuly2015cpu.nbin...

Joomla Helpdesk Pro Plugin < 1.4.0 - Multiple Vulnerabilities

Joomla Helpdesk Pro versions prior to 1.4.0 suffers from cross site scripting, local file disclosure, remote file upload, remote SQL injection, and insecure direct object reference vulnerabilities. Document Title ============== Joomla! plugin Helpdesk Pro 1.4.0 Reported By =========== Simon Rawet...

americatv.com.pe XSS vulnerability

Open Bug Bounty ID: OBB-73682 Description| Value ---|--- Affected Website:| americatv.com.pe Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

americatv.com.pe XSS vulnerability

Open Bug Bounty ID: OBB-73591 Description| Value ---|--- Affected Website:| americatv.com.pe Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

citruscountyflcoc.wliinc27.com Open Redirect vulnerability

Vulnerable URL: http://citruscountyflcoc.wliinc27.com/external/wcpages/referral.aspx?ReferralType=W=4816=108=11=0=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:40 GMT Vulnerability type:| Open Redirect Vulnerability...

searchtruth.com XSS vulnerability

Open Bug Bounty ID: OBB-70968 Description| Value ---|--- Affected Website:| searchtruth.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Vulcan Theme XSS / Disclosure/ DoS

Hello list! Let's back to vulnerabilities, which I disclosed in April 2011, which can be used for DDoS attacks on other sites, e.g. with my DAVOSET http://seclists.org/fulldisclosure/2015/Jun/111. In addition to hundreds of themes, which I wrote about in previous years, here is another theme for...