5084 matches found
johnsonsofkingfisher.net XSS vulnerability
Vulnerable URL: http://johnsonsofkingfisher.net/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...
kellerbrosdodge.com XSS vulnerability
Vulnerable URL: http://kellerbrosdodge.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...
acura.superiorcars.com XSS vulnerability
Vulnerable URL: http://acura.superiorcars.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...
actontoyota.com XSS vulnerability
Vulnerable URL: http://www.actontoyota.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...
acacarsofdublin.com XSS vulnerability
Vulnerable URL: http://www.acacarsofdublin.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...
CVE-2016-5039
The getattrvalue function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted object with all-bits on...
DEBIAN-CVE-2017-0310
All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper access controls allowing unprivileged user to cause a denial of service...
RUSTSEC-2017-0001 scalarmult() vulnerable to degenerate public keys
The scalarmult function included in previous versions of this crate accepted all-zero public keys, for which the resulting Diffie-Hellman shared secret will always be zero regardless of the private key used. This issue was fixed by checking for this class of keys and rejecting them if they are us...
scalarmult() vulnerable to degenerate public keys
The scalarmult function included in previous versions of this crate accepted all-zero public keys, for which the resulting Diffie-Hellman shared secret will always be zero regardless of the private key used. This issue was fixed by checking for this class of keys and rejecting them if they are us...
NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2016-12900)
NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A security vulnerability exists in the kernel mode layer nvlddmkm.sys processor of DxgDdiEscape in all versions of the NVIDIA Windows GPU Display Driver, which stems from the...
SDN Security Evaluation Framework: DELTA
DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...
CVE-2016-8826
All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux where a user can cause a GPU interrupt storm, leading to a denial of service...
IBM Cloud Orchestrator Information Disclosure Vulnerability
IBM Cloud Orchestrator is a suite of solutions from IBM USA that provides cloud management for IT services and accelerates software and infrastructure delivery. The solution provides capabilities such as extending on-premise and off-premise cloud services as well as application program interfaces...
WordPress All In One WP Security And Firewall Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site.All In One WP Security & Firewall is one of the security management and firewall plug-ins. A cross-site scripting...
systemd security and bug fix update
219-30.0.1.3 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 22224874 - allow dm remove ioctl to co-operate with UEK3 Vaughan Cao Orabug: 18467469 - add hv dynamic memory support Jerry Snitselaar Orabug: 18621475 - rules: load sg module 1223340 - run: drop mistakenly committed test code...
NodCMS PHP Code Execution Vulnerability
NodCMS is a free PHP development framework that supports multilingualism. A PHP code execution vulnerability exists in all existing versions of NodCMS, which can be exploited by an attacker to execute arbitrary code in the context of an affected application, potentially resulting in a denial of...
dance.nyc XSS vulnerability
Vulnerable URL: https://www.dance.nyc/search/?dir=%3C/script%3E%3Cscript%3Ealert'OPENBUGBOUNTY';%3C/script%3E%3Cscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 759468 VIP...
QIWI: [vitrina.contact-sys.com] Full Path Disclosure
Уязвимый сценарий: /user/all/orders Уязвимые параметры: order, sort PoC: http://vitrina.contact-sys.com/user/all/orders?order=ordernumber&sort=desc http://vitrina.contact-sys.com/user/all/orders?order=ordernumber&sort=desc Примеры путей: █████pluginstyletable.inc...
Zenbership has multiple vulnerabilities
Zenbership is an open source customer relationship management platform. All versions of Zenbership suffer from a cross-site scripting vulnerability and a cross-site request forgery vulnerability that can be exploited by an attacker to steal cookie-based authentication or inject malicious scripts...
