urbanjungle.uk.com XSS vulnerability

Vulnerable URL: http://urbanjungle.uk.com/error.asp?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 95111...

charlotteobserver.com XSS vulnerability

Vulnerable URL: http://www.charlotteobserver.com/search/?q=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.03.2016 Latest check for patch:| 21.03.2016 12:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

paviansystems.com XSS vulnerability

Vulnerable URL: http://paviansystems.com/pavianresponsivephp/mobservicesswcontent.php?callback=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:10 GMT Vulnerability type:| XSS Vulnerability status...

The vulnerability of the Android operating system, which allows a hacker to intercept or simulate SIM STK commands

The vulnerability of the SIM Toolkit component in the Android operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept or simulate SIM STK commands using a specially crafted application...

Gryffin - Large Scale Web Security Scanning Platform

Gryffin is a large scale web security scanning platform. It is not yet another scanner. It was written to solve two specific problems with existing scanners: coverage and scale. Better coverage translates to fewer false negatives. Inherent scalability translates to capability of scanning, and...

Raonet Subscriber Ethernet Router MySQL 数据库账户密码泄露

Raonet SER-500 路由器 MySQL 账户密码泄漏, 可远程登录, 高权限. 验证地址: http://61.77.63.86/inc/conndb.inc Google dork: intitle:Raonet Subscriber Ethernet Router !/usr/bin/env python import urlparse import re import urllib2 def assignservice, arg: if service != "www": return arr = urlparse.urlparsearg return True,...

Wordpress4. 2. 3. rights and SQL injection vulnerabilities(CVE-2 0 1 5-5 6 2 3)analysis-vulnerability warning-the black bar safety net

First, explain the background. wordpress user permissions are divided into subscribers, contributors, authors, editors and administrators. Permission the lowest is the Subscriber, the Subscriber only Subscribe to the articles of permissions, wordpress open registration the default registration of...

DEBIAN-CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

WordPress before 4.2.3 does not properly verify the editposts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php...

CVE-2015-5623

CVE-2015-5623 affects WordPress prior to 4.2.3, where edit_posts capability was not properly verified. This allowed remote authenticated users (Subscriber) to bypass restrictions and create drafts via Quick Draft (wp-admin/post.php). Root cause: inadequate capability check. Impact: privilege esca...

WordPress Draft Creation Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress has a security vulnerability, users with Subscriber rights can create drafts through the Quick Draft feature...

MGASA-2015-0290 Updated wordpress package fixes security vulnerabilities

WordPress versions 4.2.2 and earlier are affected by a cross-site scripting vulnerability, which could allow users with the Contributor or Author role to compromise a site CVE-2015-5622. WordPress versions 4.2.2 and earlier are affected by an issue where it was possible for a user with Subscriber...

WordPress <= 4.2.2 - XSS

WordPress 4.2.2 is prone to a cross site scripting vulnerability that allows an authenticated user to bypass intended access restrictions and create drafts by leveraging the Subscriber role. Also, it allows to inject web script or HTML by leveraging the Author role to place a crafted shortcode...

rubygem-actionmailer: email address processing DoS

Multiple format string vulnerabilities in logsubscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message...

Wordpress Freshmail Plugin 1.5.8 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Unauthenticated SQL Injection on Wordpress Freshmail 1 Google Dork: N/A Date: 05/05/2015 Exploit Author: Felipe Molina de la Torre @felmoltor Vendor Homepage: http://freshmail.com/ Version: getrow'select from '.$wp...

Joomla! Letterman Subscriber Module 1.2.4 Mod_Lettermansubscribe.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24479/info The Joomla! Letterman Subscriber module is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Harris Stratex StarMAX 2100 WIMAX Subscriber Station Running Config CSRF Exploit

No description provided by source. I found CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber station.Using this code i am able to view the current configuration of the subscriber station without authentication from both LAN & WAN Software Link:http://securityvulns.com/Wdocument736.html...

Cisco Subscriber Edge Services Manager Cross Site Scripting And HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/34454/info Cisco Subscriber Edge Services Manager is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML o...