Cisco Jabber Guest Server HTTP Web-Based Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of the Cisco Jabber Guest application could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. The vulnerability is due to insufficient input validation of the HTTP...

CVE-2016-0713: Gorouter XSS | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Description A vulnerability has been discovered in the gorouter process that allows a cross-site-scripting XSS attack. Should a malicious actor intermediate requests from clients to the router, modifying the request to contain malicious code, this...

tanks-direct.co.uk XSS vulnerability

Vulnerable URL: http://www.tanks-direct.co.uk/search.php?cid=0id=0=derp "&Submit.x;=0&Submit.y;=0 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 671236...

Cisco Unity Connection User Search Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system's web interface. The vulnerability is due to insufficient input validation of a...

api.forismatic.com XSS vulnerability

Vulnerable URL: http://api.forismatic.com/api/1.0/?method=getQuote=jsonp〈=en=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

Ruby on Rails rails-html-sanitizer XSS 漏洞

XSS vulnerability in rails-html-sanitizer There is a XSS vulnerability in Rails::Html::FullSanitizer used by Action View's striptags. This vulnerability has been assigned the CVE identifier CVE-2015-7579. Versions Affected: 1.0.2 Not affected: 1.0.0, 1.0.1 Fixed Versions: 1.0.3 Impact Due to the...

shinerbaptistchurch.com XSS vulnerability

Vulnerable URL: http://www.shinerbaptistchurch.com/search.php?pageID=search=+%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

XSS vulnerability in rails-html-sanitizer

There is a XSS vulnerability in Rails::Html::FullSanitizer used by Action View's striptags. This vulnerability has been assigned the CVE identifier CVE-2015-7579. Versions Affected: 1.0.2 Not affected: 1.0.0, 1.0.1 Fixed Versions: 1.0.3 Impact ------ Due to the way that Rails::Html::FullSanitizer...

53KF XSS打客服

简要描述： RT 详细说明： http://www22.53kf.com 在截图的时候截断 修改图片地址为XSS地址 即可打客服 漏洞证明：...

private.com XSS vulnerability

Vulnerable URL: http://www.private.com/search.php?query=$='XSSposed',alert$...

shaken.nl vulnerability

Vulnerable URL: http://www.shaken.nl/shaken/bookmarks/redirect.php?link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

kentuckycoders.com vulnerability

Vulnerable URL: http://www.kentuckycoders.com/?option=comkycoders=CodeHS%20-%20Link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 14.03.2016 Latest check for patch:| 14.03.2016 06:03 GMT Vulnerability status:| Publicly disclosed Alexa Rank| 13304436 Google...

www6.directtalk.com.br XSS vulnerability

Vulnerable URL: http://www6.directtalk.com.br/chat31/LayoutDT/Padrao/Error.aspx?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Updated moodle packages fix security vulnerability

In Moodle before 2.8.9, if guest access is open on the site, unauthenticated users can store Atto draft data through the editor autosave area, which could be exploited in a denial of service attack CVE-2015-5332. In Moodle before 2.8.9, due to a CSRF issue in the site registration form, it is...

register.k7computing.com XSS vulnerability

Vulnerable URL: http://register.k7computing.com/Subscriptions/MyAccntNoCredentials1.asp?Email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:31 GMT Vulnerability type:| XSS Vulnerability status:...

maratonstav.cz XSS vulnerability

Vulnerable URL: http://www.maratonstav.cz/page.php?id=51 union select 1,2,concat0x223e3c696d67207372633d78206f6e6572726f723d616c657274282f585353504f5345442f293e-- - Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:05 GMT Vulnerability type:|...

bedrijvenweb.nl XSS vulnerability

Vulnerable URL: http://www.bedrijvenweb.nl/fileadmin/aanmelden/stap1.php?domein="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1673248 Google Pagerank| 6 VIP website status:|...

healthymendocino.org vulnerability

Vulnerable URL: http://www.healthymendocino.org/redir.php?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 9126699 Google Pagerank| 3 VIP website status:| No Check...

WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting

WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting Application: WP-Client Version: 3.8.7 Author: Pier-Luc Maltais from COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== One plugin configures multiple are...

FreeBSD : mozilla -- multiple vulnerabilities (9d04936c-75f1-4a2c-9ade-4c1708be5df9)

The Mozilla Project reports : MFSA 2015-133 NSS and NSPR memory corruption issues MFSA 2015-132 Mixed content WebSocket policy bypass through workers MFSA 2015-131 Vulnerabilities found through code inspection MFSA 2015-130 JavaScript garbage collection crash with Java applet MFSA 2015-129 Certai...