scottish-art-scene.com XSS vulnerability

Vulnerable URL: http://www.scottish-art-scene.com/scottishartartists%20search.html?sitesearchresults4=%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E=0 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:30 GMT Vulnerability type...

art.com XSS vulnerability

Vulnerable URL: https://www.art.com/gallery/id--c1837/vintage-art-prints.htm?ui="-prompt/XSSPOSED/-" Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10734...

guests.met-art.com XSS vulnerability

Vulnerable URL: http://guests.met-art.com/search/%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

arthistory.yale.edu XSS vulnerability

Vulnerable URL: http://arthistory.yale.edu/courses/archivepage.php?PrevYear=2013'"=2014 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4184 Google Pageran...

arthistory.yale.edu XSS vulnerability

Vulnerable URL: http://arthistory.yale.edu/courses/archivepage.php?PrevYear=2013=2014'" Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4184 Google Pageran...

art-quotes.com XSS vulnerability

Open Bug Bounty ID: OBB-87663 Description| Value ---|--- Affected Website:| art-quotes.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

jimmyhoustonart.com XSS vulnerability

Vulnerable URL: http://www.jimmyhoustonart.com/Search.cfm Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

gibsonfineart.ca XSS vulnerability

Vulnerable URL: http://www.gibsonfineart.ca/Search.cfm Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status:| No Check...

art-seekers.com XSS vulnerability

Vulnerable URL: http://www.art-seekers.com/ascontactme.php?Error=...

Art Pretty Photo [artprettyphoto],1.9.21 and below,XSS (Cross Site Scripting)

Art Pretty Photo artprettyphoto, 1.9.21 and below, XSS Cross Site Scripting...

X360 VideoPlayer ActiveX Control 2.6 - Full ASLR & DEP Bypass Exploit

Exploit for windows platform in category remote exploits !-- Exploit Title: X360 VideoPlayer ActiveX Control RCE Full ASLR & DEP Bypass Author: Rh0 Date: Jan 30 2015 Affected Software: X360 VideoPlayer ActiveX Control 2.6 VideoPlayer.ocx Vulnerability: Buffer Overflow in Data Section Tested on:...

Peerio — End-to-End Encrypted Secure Messenger and File Sharing App

On one end, where governments of countries like U.K is criticizing end-to-end encryption and considering to ban the encrypted communication apps like Snapchat, CryptoCat, WhatsApp and Apple’s iMessage. On the other hand, the Internet community has come up with a new and rather more secure encrypt...

Arris Touchstone TG862G/CT Cross Site Request Forgery

----------- Vendor: ----------- Arris Interactive, LLC http://www.arrisi.com/ ISP: Comcast Xfinity ----------------------------------------- Affected Products/Versions: ----------------------------------------- HW: Arris Touchstone TG862G/CT Xfinity branded SW: Version 7.6.59S.CT Tested...

[SECURITY] Fedora 21 Update: perl-Mojolicious-5.49-1.fc21

Back in the early days of the web there was this wonderful Perl library called CGI, many people only learned Perl because of it. It was simple enough to get started without knowing much about the language and powerful enough to keep you going, learning by doing was much fun. While most of the...

[SECURITY] Fedora 19 Update: perl-Mojolicious-5.49-1.fc19

Back in the early days of the web there was this wonderful Perl library called CGI, many people only learned Perl because of it. It was simple enough to get started without knowing much about the language and powerful enough to keep you going, learning by doing was much fun. While most of the...

[SECURITY] Fedora 20 Update: perl-Mojolicious-5.49-1.fc20

Back in the early days of the web there was this wonderful Perl library called CGI, many people only learned Perl because of it. It was simple enough to get started without knowing much about the language and powerful enough to keep you going, learning by doing was much fun. While most of the...

CVE-2014-7795

The Harpers Bazaar Art aka com.itp.harpersart application @7F080181 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Harpers Bazaar Art aka com.itp.harpersart application @7F080181 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7795

The CVE-2014-7795 entry concerns the Android app Harpers Bazaar Art (package com.itp.harpersart, reference @7F080181) that does not verify X.509 certificates when establishing SSL connections. This permits man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-7795

The Harpers Bazaar Art aka com.itp.harpersart application @7F080181 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...