kurier.at XSS vulnerability

Vulnerable URL: http://kurier.at/wetter?alert'XSSPOSED'...

Aeris Calandar 2.1 - Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits - Title : Aeris Calandar 2.1 - Buffer Overflow Vulnerability - Author : ZwX - Date : 27/11/2015 - Software Link : http://www.esumsoft.com/download/?prod=aeriscalendar - Vendor : http://www.esumsoft.com/ - Tested On : Windows 7 & Windows XP S...

Aeris Calandar v2.1 - Buffer Overflow Vulnerability

Document Title: =============== Aeris Calandar v2.1 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1656 Release Date: ============= 2015-12-01 Vulnerability Laboratory ID VL-ID: ==================================== 1656...

Aeris Calandar v2.1 - Buffer Overflow Vulnerability

Document Title: =============== Aeris Calandar v2.1 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1656 Release Date: ============= 2015-12-01 Vulnerability Laboratory ID VL-ID: ==================================== 1656...

uv.willyweather.com.au XSS vulnerability

Vulnerable URL: http://uv.willyweather.com.au/search/search.html?query="';-- Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Googl...

weather.unisys.com XSS vulnerability

Open Bug Bounty ID: OBB-101063 Description| Value ---|--- Affected Website:| weather.unisys.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2015-1600 - Netatmo Weather Station Cleartext Password Leak

Summary During initial setup, the weather station will submit its complete configuration unencrypted to the manufacturer cloud service. This configuration includes confidential information like the user's Wifi password. The problem has been fixed by removing this configuration dump from current...

Netatmo Weather Station information leakage

Information leakage...

Netatmo Weather Station Information Disclosure Vulnerability

Netatmo Weather Station is an air quality monitoring app. Netatmo Weather Station uses plaintext passwords, allowing attackers to exploit vulnerabilities to obtain sensitive information...

Weather Channel Cross Site Scripting

The Weather Channel weather.com Almost All Links Vulnerable to XSS Attacks Domain Description: http://www.weather.com/ "The Weather Channel is an American basic cable and satellite television channel which broadcasts weather forecasts and weather-related news and analyses, along with documentarie...

Chinese Attackers Hack NOAA's Systems

Systems belonging to the National Oceanic and Atmospheric Administration NOAA were recently compromised, purportedly by Chinese hackers. The NOAA confirmed that four of the scientific agency’s websites were targeted and compromised in an “internet-sourced attack” earlier this fall, in a statement...

CVE-2014-6699

The Weather Channel aka com.weather.Weather application 5.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Weather Channel aka com.weather.Weather application 5.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Morocco Weather aka com.mobilesoft.meteomaroc application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6697

The Morocco Weather aka com.mobilesoft.meteomaroc application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6699

The Weather Channel (com.weather.Weather) Android app version 5.2.0 does not verify X.509 certificates from SSL servers, allowing man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The provided documents do not specify affected APIs, versions ...

CVE-2014-6699

The Weather Channel aka com.weather.Weather application 5.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6697

The CVE-2014-6697 entry concerns the Morocco Weather Android app (com.mobilesoft.meteomaroc) version 3.1. The vulnerability is that the app does not verify X.509 certificates for SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted cert...

Thousands of High-Risk Vulnerabilities Found in NOAA Satellite System

The informational systems that the National Oceanic and Atmospheric Administration NOAA run are loaded with several critical vulnerabilities that could leave it vulnerable to cyber attacks. According to the findings of an audit recently conducted by the Department of Commerce’s Office of the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the WP GuestMap plugin 1.8 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 zl, 2 mt, or 3 dc parameter to guest-locator.php; the 4 zl, 5 mt, 6 activate, or 7 dc parameter to online-tracker.php;...