14619 matches found
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
matsu-med.or.jp XSS vulnerability
Vulnerable URL: http://www.matsu-med.or.jp/medicalsearch/entry.php?id=13'"132 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3552061 VIP website status:| No Check matsu-med.or.jp S...
store.trxtraining.com XSS vulnerability
Vulnerable URL: https://store.trxtraining.com/search.php?searchquery=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...
correioangolense.com XSS vulnerability
Vulnerable URL: https://www.correioangolense.com/busca//%22'--!%3E%3CScript%20/K/%3Econfirm/OPENBUGBOUNTY/%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 53353 V...
offenburg.de XSS vulnerability
Vulnerable URL: https://www.offenburg.de/html/misc/searchinterface.html?searchterm=test%22%3E%3Cimg+src%3Dx+onerror%3Dalert%28%27OPENBUGBOUNTY%27%29%3E&show-amount-results;=15 Details: Description| Value ---|--- Patched:| Yes, at 16.01.2018 Latest check for patch:| 16.01.2018 09:44 GMT...
anabel-shop.com.ua XSS vulnerability
Vulnerable URL: https://anabel-shop.com.ua/firms.php?sfirm=%D0%AD%D0%BE%D0%BB%D0%B0%20%D0%A1%D1%82%D0%B8%D0%BB%D1%8C%22%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
banking.talentsprint.com XSS vulnerability
Vulnerable URL: https://banking.talentsprint.com//accounts/login?email=xss=auto-login= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...
lichnosti.net Open Redirect vulnerability
Vulnerable URL: http://lichnosti.net/url.php?site=www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 210317 VIP website status:| No Check lichnosti.net...
CVE-2015-5182
Cross-site request forgery CSRF vulnerability in the jolokia API in A-MQ...
CVE-2015-5181
The JBoss console in A-MQ allows remote attackers to execute arbitrary JavaScript...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the jolokia API in A-MQ...
CVE-2015-5182
CVE-2015-5182 is a CSRF vulnerability in the jolokia API of Red Hat JBoss A-MQ (ActiveMQ-based). The connected documents specify that an authenticated user could be tricked by visiting a malicious page, causing the user’s session to perform unintended actions via the jolokia interface (CSRF). The...
CVE-2015-5181
The JBoss console in A-MQ allows remote attackers to execute arbitrary JavaScript...
CVE-2015-5181
The CVE-2015-5181 entry concerns Red Hat JBoss A-MQ/JBoss A-MQ Console. The issue is that the JBoss A-MQ console would accept a string containing JavaScript as the name of a new message queue, which leads to remote execution of JavaScript in the console UI. The vulnerability is described in Red H...
CVE-2015-5182
Cross-site request forgery CSRF vulnerability in the jolokia API in A-MQ...
Cross site request forgery (csrf)
geminabox aka Gem in a Box before 0.13.7 has CSRF, as demonstrated by an unintended gem upload...
CVE-2017-14506
geminabox aka Gem in a Box before 0.13.6 has XSS, as demonstrated by uploading a gem file that has a crafted gem.homepage value in its .gemspec file...
CVE-2017-14683
Gem in a Box (geminabox) CVE-2017-14683 affects versions before 0.13.7 and is due to a Cross-Site Request Forgery (CSRF) flaw demonstrated by an unintended gem upload. Affected software is geminabox, a Ruby-based personal code hosting platform. The Root Cause, per the description, is CSRF allowin...
CVE-2017-14506
Gem in a Box (geminabox) prior to 0.13.6 is vulnerable to Cross-site Scripting (XSS) via a crafted gem.homepage value in a .gemspec file uploaded as a gem. Affected product: geminabox (Ruby) before 0.13.6. Impact: XSS that may affect users accessing the web interface; some sources note potential ...
mundaring.wa.gov.au XSS vulnerability
Vulnerable URL: https://www.mundaring.wa.gov.au/layouts/15/viewlsts.aspx?FollowSite=0='-confirm/OPENBUGBOUNTY/-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1070086 VIP website...