smv.to XSS vulnerability

Vulnerable URL: http://smv.to/search?keyword=%3Cscript%3Ealert%22XSSPOSED%22%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3498 VIP website status:| Yes Coordinated...

rapidfirecms.com XSS vulnerability

Vulnerable URL: http://www.rapidfirecms.com/templates/luk/page/pagestandard.php?secID=1045=%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:...

Denial Of Service (DoS)

PyYaml is vulnerable to CVE-2014-9130 through a copied version of libyaml. The version of libyaml used is vulnerable to denial of service DoS attacks. A malicious user can pass a string to the application that can cause a parsing error leading to an infinite loop. This can cause the service to be...

PT-2017-11665 · Ibm · Ibm Jazz Foundation

Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation affected versions not specified Description: The issue could expose potentially sensitive information to authenticated users through stack trace error conditions. Recommendations: At the moment, there is no information abo...

Directory Traversal

Overview Affected versions of serveryaozeyan resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable...

CVE-2017-7967

All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability when a corrupted vf2 file is used. This vulnerability causes the software to halt or not start when trying to open the corrupted file. This vulnerability occurs...

elle.com.hk XSS vulnerability

Vulnerable URL: http://www.elle.com.hk/tag/retr0"autofocusonfocus="alertxssposed'-confirmOPENBUGBOUNTY-'/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 50041 VIP website status:| ...

Bnistack error 85 - IOS Socket UNAVAILABLE - not counting retry

Target Devices actively connected to Provisioning Services suddenly exhibit severe performance issues such as: Target completely hangs Performance is extremely slow Number of retries increases dramatically Atthe same time the following error is found in the Event Logs inside the Target Device:...

youfacebookclip.com XSS vulnerability

Vulnerable URL: http://www.youfacebookclip.com/search.php?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 137761 VIP website status:| No Check youfacebookclip.com SSL connection...

Downloads Resources over HTTP

Overview Affected versions of windows-seleniumjar insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

Downloads Resources over HTTP

Overview Affected versions of mystem insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

Downloads Resources over HTTP

Overview Affected versions of webdriver-launcher insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

CVE-2016-6397

A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System IPICS Universal Media Services UMS could allow an unauthenticated, remote attacker to modify configuration parameters of the UMS and cause the system to become unavailable. Affect...

Design/Logic Flaw

A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System IPICS Universal Media Services UMS could allow an unauthenticated, remote attacker to modify configuration parameters of the UMS and cause the system to become unavailable. Affect...

Cisco IOS XR Software Command-Line Interface Privilege Escalation Vulnerability

A vulnerability in the command-line interface CLI of IOS-XR series software could allow an authenticated, local attacker to execute arbitrary code on a targeted system at the root privilege level. The vulnerability is due to incorrect permissions given to a set of users. An attacker could exploit...

numero.com XSS vulnerability

Vulnerable URL: http://www.numero.com/fr/search-articles?keyword=--%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 388382 VIP...

Cisco Web Security Appliance HTTP Load Denial of Service Vulnerability

A vulnerability in HTTP request forwarding with Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to link saturation. The vulnerability is due to how HTTP data ranges are downloaded from the destinatio...

soblacktie.com XSS vulnerability

Vulnerable URL: http://www.soblacktie.com/apps/search?s=%3C%2Ftitle%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2488837 VIP...

PT-2016-7167 · Alt Linux +2 · Alt Linux +2

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a security problem, but specific details are not provided. Recommendations: At the moment, there is no information about...

RCE In AddThis

This vulnerability has been fixed as of July 20, 2016 and is shared with consent from the vendor. If you wish to share the information provided in the write up, provide credit for the original author or contact [email protected] for more info. Timeline of the report 1. July 20, 2016 8:59 AM:...