diepresse.com XSS vulnerability

Vulnerable URL: http://diepresse.com/user/search.do Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7861 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value...

Critical: java-1.8.0-openjdk

Issue Overview: It was discovered that the RMI registry and DCG implementations in the RMI component of OpenJDK performed deserialization of untrusted inputs. A remote attacker could possibly use this flaw to execute arbitrary code with the privileges of RMI registry or a Java RMI application...

OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)

It was discovered that the JAAS component of OpenJDK did not use the correct way to extract user DN from the result of the user search LDAP query. A specially crafted user LDAP entry could cause the application to use an incorrect DN...

Inout QuerySpace 1.0 Script - Improper Access Restrictions Vulnerability

Exploit for php platform in category web applications Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout QuerySpace Script Script Version: v1.0 Script Buy Now: http://www.inoutscripts.com/demo/inout-queryspace/demo/ Author: İhsan Şenca...

shinden.pl XSS vulnerability

Vulnerable URL: http://shinden.pl/users?search=666"...

gameforge.com XSS vulnerability

Vulnerable URL: http://gameforge.com/user/search?dummy=...

us.gameforge.com XSS vulnerability

Vulnerable URL: http://us.gameforge.com/user/search?dummy=...

gr.gameforge.com XSS vulnerability

Vulnerable URL: http://gr.gameforge.com/user/search?dummy=...

hu.gameforge.com XSS vulnerability

Vulnerable URL: http://hu.gameforge.com/user/search?dummy=1...

looki.ae XSS vulnerability

Vulnerable URL: http://www.looki.ae/user/usersearch.html?nickname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

looki.us XSS vulnerability

Vulnerable URL: http://www.looki.us/user/usersearch.html?nickname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

PT-2014-8682 · Gogs · Gogs

Name of the Vulnerable Software and Affected Versions: Gogs versions 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the q parameter to two API endpoints: "api/v1/repos/search" and...

CVE-2014-5196

Cross-site request forgery CSRF vulnerability in improved-user-search-in-backend.php in the backend in the Improved user search in backend plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that insert XSS sequences via the...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in improved-user-search-in-backend.php in the backend in the Improved user search in backend plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that insert XSS sequences via the...

CVE-2014-5196

Cross-site request forgery CSRF vulnerability in improved-user-search-in-backend.php in the backend in the Improved user search in backend plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that insert XSS sequences via the...

CVE-2014-5196

The CVE-2014-5196 entry details a CSRF vulnerability in the WordPress plugin Improved User Search in Backend (backend) prior to version 1.2.5. The flaw resides in the iusib_meta_fields parameter, enabling remote attackers to hijack administrator authentication by injecting XSS sequences. Affected...

WordPress Improved User Search in Backend Plugin <= 1.2.4 - CSRF

Because of this vulnerability in improved-user-search-in-backend.php, the attackers can hijack the authentication of administrators for requests that insert XSS sequences. Solution Update the plugin...

Joomla JE Job Component com_jejob LFI Vulnerability

No description provided by source. Name : Joomla comjejob LFI Vulnerability Date : june, 26 2010 Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/jobcomponent/ Google Dork: inurl:comjejob Price:$25.00 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r...

CVE-2014-0906

The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not check whether a session cookie is current, which allows remote attackers to conduct user-search actions by leveraging possession of a 1 expired or 2 invalidated cookie...

Code injection

The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not check whether a session cookie is current, which allows remote attackers to conduct user-search actions by leveraging possession of a 1 expired or 2 invalidated cookie...