shop.accesso.com XSS vulnerability

Vulnerable URL: https://shop.accesso.com/affiliate/sixflagsBlast/template/Ride1.php?username===5007=Fulton+County+Government=https://shop.accesso.com/clients/sixflags/affiliate/index.php?m=12907ℑ=xss%22%20onerror=prompt%27openbugbounty%27%20%22 Details: Description| Value ---|--- Patched:| No...

sun-sentinel.com XSS vulnerability

Open Bug Bounty ID: OBB-336427 Description| Value ---|--- Affected Website:| sun-sentinel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

finken.de XSS vulnerability

Vulnerable URL: http://www.finken.de/catalogsearch/result?q=%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C%2Fscript%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 873634 VIP website...

SUSE-SU-2017:2655-1 Security update for portus

This update for portus fixes the following issues: - CVE-2017-14621: Fixed a XSS attack via the Team field, related to typeahead. bsc1059664...

Cross site scripting

A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. The vulnerability is due to insufficient input validation by the web UI of the affected software. An attacker could exploit this...

CVE-2017-7823

The content security policy CSP "sandbox" directive did not create a unique origin for the document, causing it to behave as if the "allow-same-origin" keyword were always specified. This could allow a Cross-Site Scripting XSS attack to be launched from unsafe content. This vulnerability affects...

apprendre-le-web.fr XSS vulnerability

Vulnerable URL: http://www.apprendre-le-web.fr/search.php?orderby=position=descquery=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

CVE-2017-7554

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio...

Cross site scripting

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio...

CVE-2017-7554

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio...

kendoguide.org XSS vulnerability

Vulnerable URL: http://kendoguide.org/wp-content/plugins/wp-js-external-link-info/redirect.php?blog=A0BABE82B2BFBE+BABDB4BE=%22/%3E%3CsvG/onLoad=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.12.2017 Vulnerability type:| XSS Vulnerability...

codezone.pt XSS vulnerability

Vulnerable URL: http://www.codezone.pt/forms.php?s='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18539049 VIP website status:| No Check codezone.pt SSL connection:| Grade: A...

slagharen.com XSS vulnerability

Vulnerable URL: http://www.slagharen.com/nl/search/All/%2522%253E%253Cimg%2Bsrc%253Dx%2Bonerror%253Dprompt%2528'OPENBUGBOUNTY'%2529%253E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

wataaah.de XSS vulnerability

Vulnerable URL: https://wataaah.de/wp-content/plugins/wp-js-external-link-info/redirect.php?blog=wataaah="http://sergiomuttyofficial.tumblr.com Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

CVE-2017-12248

A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation...

D-link ten vulnerabilities 0Day studies attach detailed procedures-vulnerability warning-the black bar safety net

Security researcher Pierre Kim recently revealed the D-Link DIR 850LAC1200-Type Dual-Band Gigabit cloud router is exposed 10 a safety score comprisesXSSattack invasion, shortage of proper firmware cover, back door and root mention the right. Here are 10 Safety scores are: Firmware to. The firmwar...

WebKit JSC BytecodeGenerator::emitGetByVal Incorrect Optimization

WebKit: JSC: Incorrect optimization in BytecodeGenerator::emitGetByVal CVE-2017-7061 Let's start with JS code. let o = ; for let i in xx: 0 oi; 0; i-- ForInContext& context = mforInContextStacki - 1.get; if context.local != property continue; if !context.isValid break; if context.type ==...

CVE-2017-8041

In Single Sign-On for Pivotal Cloud Foundry PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text field for an organization name...

Design/Logic Flaw

In Single Sign-On for Pivotal Cloud Foundry PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text field for an organization name...

CVE-2017-8041

In Single Sign-On for Pivotal Cloud Foundry PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS attack on certain Single Sign-On service UI pages by inputting code in the text field for an organization name...