249 matches found
rahnama.com XSS vulnerability
Vulnerable URL: http://www.rahnama.com/user/signin/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6646 VIP website status:| Yes Check rahnama.com SSL connection:| Grade: B+...
signin.verizon.com XSS vulnerability
Vulnerable URL: https://signin.verizon.com/sso/authsso/loginProcess.jsp?target=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| Yes, at 26.09.2017 Latest check for patch:| 26.09.2017 05:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
ohmyzip.com XSS vulnerability
Vulnerable URL: https://www.ohmyzip.com/account/signin?ret=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12052 VIP website status:| Yes Check ohmyzip.com SSL connection:| Grade:...
March 8, 2016, update for Office 2016 (KB3114705)
None None...
xoom.com XSS vulnerability
Vulnerable URL: https://www.xoom.com/signIn?r=I0ez7 Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 02:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9350 Google Pagerank| 5 VIP website status:| Yes Check...
crazybelly.com XSS vulnerability
Open Bug Bounty ID: OBB-132205 Description| Value ---|--- Affected Website:| crazybelly.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
letsventure.com XSS vulnerability
Vulnerable URL: https://letsventure.com/signin?error=%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E=lol Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20483 Google Pagerank| 0 VIP...
clickemprego.com XSS vulnerability
Vulnerable URL: http://www.clickemprego.com/signin.php?errmsg=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 19:50 GMT Vulnerability type:| XSS Vulnerability status:| Public...
PT-2014-8445
Name of the Vulnerable Software and Affected Versions Voice Of Web AllMyGuests version 0.4.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the AMG signin topic parameter to "index.php". Recommendations For version 0.4.1, consider...
HybridAuth 2.2.2 - Remote Code Execution
No description provided by source. | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| HybridAuth = 2.2.2 Remote Code Execution Website : http://hybridauth.sourceforge.net/ Exploit Author : @u0x Pichaya Morimoto Release dates : August 5, 2014...
HybridAuth 2.1.2 Remote Code Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| HybridAuth = 2.1.2 Remote Code Execution Website : http://hybridauth.sourceforge.net/ Exploit Author : @u0x Pichaya Morimoto Release dates :...
CVE-2013-6643
The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/oneclicksigninbubbleview.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handli...
CVE-2013-6643
The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/oneclicksigninbubbleview.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handli...
Design/Logic Flaw
The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/oneclicksigninbubbleview.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handli...
CVE-2013-6643
The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/oneclicksigninbubbleview.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handli...
CVE-2013-6643
The CVE-2013-6643 issue affects Google Chrome prior to 32.0.1700.76 on Windows and 32.0.1700.77 on macOS/Linux. It stems from improper handling of the closing of an untrusted signin confirmation dialog in OneClickSigninBubbleView::WindowClosing, allowing an attacker to trigger a sync with an arbi...
PT-2014-3145
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 32.0.1700.76 on Windows Google Chrome versions prior to 32.0.1700.77 on Mac OS X and Linux Description The issue allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handlin...
CVE-2013-4653: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the signin functionality of ics in MyTeamwork services in Alcatel-Lucent Omnitouch 8660 My Teamwork before 6.7, Omnitouch 8670 Automated Message Delivery System AMDS before 6.7, Omnitouch 8460 Advanced Communication Server before 9.1, and...
PT-2013-5117
Name of the Vulnerable Software and Affected Versions Alcatel-Lucent Omnitouch 8660 My Teamwork versions prior to 6.7 Alcatel-Lucent Omnitouch 8670 Automated Message Delivery System AMDS versions prior to 6.7 Alcatel-Lucent Omnitouch 8460 Advanced Communication Server versions prior to 9.1...
CVE-2013-3527
Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to 1 entry/signin or 2 entry/passwordrequest...