agrowon.com XSS vulnerability

Vulnerable URL: http://www.agrowon.com/Agrowon/SearchNews.aspx?tag=%22%20onmouseover%3dprompt%28/xssposed/%29%20rk%3d%22 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

socialist.com XSS vulnerability

Vulnerable URL: http://www.socialist.com/?notfound=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.02.2016 Latest check for patch:| 22.02.2016 12:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

worldfaith.org XSS vulnerability

Vulnerable URL: http://worldfaith.org/wiki/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 07.03.2016 Latest check for patch:| 07.03.2016 01:35 GMT Vulnerability type:| XSS Vulnerability...

sandbox.medphyswiki.aapm.org XSS vulnerability

Vulnerable URL: http://sandbox.medphyswiki.aapm.org/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 12.03.2016 Latest check for patch:| 12.03.2016 01:37 GMT Vulnerability type:| XSS...

urbanjungle.uk.com XSS vulnerability

Vulnerable URL: http://urbanjungle.uk.com/error.asp?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 95111...

charlotteobserver.com XSS vulnerability

Vulnerable URL: http://www.charlotteobserver.com/search/?q=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.03.2016 Latest check for patch:| 21.03.2016 12:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

paviansystems.com XSS vulnerability

Vulnerable URL: http://paviansystems.com/pavianresponsivephp/mobservicesswcontent.php?callback=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:10 GMT Vulnerability type:| XSS Vulnerability status...

The vulnerability of the Android operating system, which allows a hacker to intercept or simulate SIM STK commands

The vulnerability of the SIM Toolkit component in the Android operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept or simulate SIM STK commands using a specially crafted application...

Gryffin - Large Scale Web Security Scanning Platform

Gryffin is a large scale web security scanning platform. It is not yet another scanner. It was written to solve two specific problems with existing scanners: coverage and scale. Better coverage translates to fewer false negatives. Inherent scalability translates to capability of scanning, and...

Raonet Subscriber Ethernet Router MySQL 数据库账户密码泄露

Raonet SER-500 路由器 MySQL 账户密码泄漏, 可远程登录, 高权限. 验证地址: http://61.77.63.86/inc/conndb.inc Google dork: intitle:Raonet Subscriber Ethernet Router !/usr/bin/env python import urlparse import re import urllib2 def assignservice, arg: if service != "www": return arr = urlparse.urlparsearg return True,...

Wordpress4. 2. 3. rights and SQL injection vulnerabilities(CVE-2 0 1 5-5 6 2 3)analysis-vulnerability warning-the black bar safety net

First, explain the background. wordpress user permissions are divided into subscribers, contributors, authors, editors and administrators. Permission the lowest is the Subscriber, the Subscriber only Subscribe to the articles of permissions, wordpress open registration the default registration of...

DEBIAN-CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

CVE-2015-5623 affects WordPress prior to 4.2.3, where edit_posts capability was not properly verified. This allowed remote authenticated users (Subscriber) to bypass restrictions and create drafts via Quick Draft (wp-admin/post.php). Root cause: inadequate capability check. Impact: privilege esca...

WordPress Draft Creation Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress has a security vulnerability, users with Subscriber rights can create drafts through the Quick Draft feature...

MGASA-2015-0290 Updated wordpress package fixes security vulnerabilities

WordPress versions 4.2.2 and earlier are affected by a cross-site scripting vulnerability, which could allow users with the Contributor or Author role to compromise a site CVE-2015-5622. WordPress versions 4.2.2 and earlier are affected by an issue where it was possible for a user with Subscriber...

WordPress <= 4.2.2 - XSS

WordPress 4.2.2 is prone to a cross site scripting vulnerability that allows an authenticated user to bypass intended access restrictions and create drafts by leveraging the Subscriber role. Also, it allows to inject web script or HTML by leveraging the Author role to place a crafted shortcode...

rubygem-actionmailer: email address processing DoS

Multiple format string vulnerabilities in logsubscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message...