warnerrobinsarea.com Open Redirect vulnerability

Vulnerable URL: http://www.warnerrobinsarea.com/redirect.php?ZID=1=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 12028418 VIP website status:| ...

24tv.ua Open Redirect vulnerability

Vulnerable URL: http://24tv.ua/home//changeLanguage.do?lang=uk=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 4828 VIP website status:| Yes...

CVE-2017-14622

Multiple cross-site scripting XSS vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter or 2 kbAction parameter in the kbAmz page to wp-admin/admin.php...

mohawkvalleyweb.com Open Redirect vulnerability

Vulnerable URL: http://www.mohawkvalleyweb.com/viewtweet.php?id=39859=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 19929502 VIP website...

directorioescolas.eu XSS vulnerability

Vulnerable URL: http://www.directorioescolas.eu/pesquisar/?cx=partner-pub-2110117975278743%3A7083281135=FORID%3A10=UTF-8=a%27%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3B%3C%2Fscript%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.12.2017...

List of Portable Hardware Devices for Penetration Testing

PenTestIT RSS Feed All of us at some point or the other think of a possibility of "remoting" a penetration test. Five years ago, you would have to engineer something like this for to suit your own requirements. However now, there are commercial tools already available that help you do that and mu...

fisheries.gov.lk XSS vulnerability

Vulnerable URL: http://www.fisheries.gov.lk/searchresult.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1662065 VIP website status:| No Coordinated Disclosure Timeline:...

laviaferrata.net XSS vulnerability

Vulnerable URL:...

findix.de XSS vulnerability

Vulnerable URL: https://www.findix.de/suche/a%3E'%3E%22%3Et%3Ci%3Ep%3Cimg%20src=y%20onerror=alert'openbugbounty'%3E Details: Description| Value ---|--- Patched:| Yes, at 04.09.2017 Latest check for patch:| 04.09.2017 08:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

manualsbase.com XSS vulnerability

Vulnerable URL: http://www.manualsbase.com/manual/search/'-confirm'OPENBUGBOUNTY'-'/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 44524 VIP website status:| Yes Coordinated...

CVE-2016-2965

IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading a user to visit a malicious link, a remote attacker could force the user to log out of Sametime. IBM X-Force ID: 113846...

IBM Sametime Meetings Server Denial of Service Vulnerability (CNVD-2017-26408)

IBM Sametime is a set of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data, and video.Sametime Meeting Server is one of the Web conferencing components used in the Sametime chat...

clickme.co.il XSS vulnerability

Vulnerable URL: http://www.clickme.co.il/search.asp?search=%3Cscriptsrc=https://xssposed.org/1.js%3E%22%27--!%3E%3C/Title/%3C/Style/%3C/Script/%3C/Textarea/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CVideo/Src/Onloadstart=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest chec...

CVE-2017-12776

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter...

PT-2017-11342 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.7.18 and earlier Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in unauthorized update, insert, or dele...

The vulnerability of the Simple Network Management Protocol (SNMP) subsystem of the Cisco IOS operating system, which allows a hacker to inject code or trigger a system reboot.

Many vulnerabilities in the Simple Network Management Protocol SNMP subsystem of the Cisco IOS operating system are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to inject code into the system or cause it to restart by sending specially created SNMP packets...

job-hunt.org XSS vulnerability

Vulnerable URL: https://www.job-hunt.org/%22%3E%3Csvg/onload=%22alert'OPENBUGBOUNTY'%22%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 64819 VIP website status:| No Coordinated...

arjo.se XSS vulnerability

Vulnerable URL: http://www.arjo.se/cafr/Search.asp?PageNumber= Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:...

CVE-2017-8005

The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle and Governance version 7.0, all patch levels; RSA Identity Management and Governance RSA IMG...

Cross site scripting

The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle and Governance version 7.0, all patch levels; RSA Identity Management and Governance RSA IMG...