rds1619.be XSS vulnerability

Vulnerable URL: http://www.rds1619.be/Search.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19752816 VIP website status:| No Check rds1619.be SSL connection:| Grade: F...

static0.7sur7.be XSS vulnerability

Vulnerable URL: http://static0.7sur7.be/static/nmc/prm/frameset/hollywood/concours/HLNBEIPHONESSKYFR.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

be-forever.de XSS vulnerability

Vulnerable URL: https://www.be-forever.de/forever-aloevera24/productlist.aspx?Suchwert=%22%3Etrolo%3Ci%3Etruli%3Cimg%20src=o%20onerror=alert%27openbugbounty%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

Rapid7 Nexpose Static Java Key Vault Cryptographic Vulnerability

Rapid7 Nexpose is a suite of vulnerability management software from Rapid7 USA that can synthesize different scans to deeply probe a network. The software proactively scans configuration environments for errors, vulnerabilities, malware and provides guidance to reduce risk. Rapid7 Nexpose has a...

moorings.co.uk XSS vulnerability

Vulnerable URL:...

X (Formerly Twitter): Html Injection and Possible XSS in sms-be-vip.twitter.com

Hi, I would like to report HTML Injection and possible cross site scripting XSS vulnerability in sms-be-vip.twitter.com Overview The sms-be-vip.twitter.com 404 error page appears to be vulnerable to XSS and HTML Injection as it doesn't encode the HTML tags in the path name such as...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3566)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3566 advisory. - net: add validation for the socket syscall protocol argument Hannes Frederic Sowa Orabug: 23267976 CVE-2015-8543 CVE-2015-8543 - ipv6: addrconf:...

Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20160216)

Multiple security flaws were found in the graphite2 font library shipped with Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2016-1521, CVE-2016-1522, CVE-2016-1523 After...

casino777.be Open Redirect vulnerability

Open Bug Bounty ID: OBB-126874 Description| Value ---|--- Affected Website:| casino777.be Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerabl...

SSH Key Vulnerability in Multiple Advantech Products

The Advantech EKI-122x-BE, EKI-132x, and EKI-136x are serial device networking servers from Advantech, China, that provide a variety of redundancy configurations and multiple access configurations for remotely monitoring serial devices via Ethernet communication protocols. A security vulnerabilit...

Hardcoded credentials

Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session...

CVE-2015-6476

The CVE-2015-6476 vulnerability affects Advantech EKI-122x-BE (firmware <1.65), EKI-132x (firmware <1.98), and EKI-136x (firmware

CVE-2011-2928

The befsfollowlink function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service incorrect pointer dereference and OOPS by accessing a long symlink on a malformed Be filesystem...

pinocchio1.be XSS vulnerability

Vulnerable URL: http://www.pinocchio1.be/site/error.php?url=http%3A%2F%2Fwww.pinocchio1.be%2Fnl%2Fhome-1.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

Latest Microsoft Transparency Report Details Content Removal Requests

Microsoft launched a new transparency website this week that bundles reports detailing requests for data the company has received, including those from law enforcement, the government, and elsewhere. The page, which Microsoft is calling its Transparency Hub, is somewhat similar to what Apple did...

TYPO3 BE User Log Extension Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system, BE User Log is a user login extension plugin. TYPO3 BE User Log has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

CVE-2015-4608

Cross-site scripting XSS vulnerability in the BE User Log bekobeuserlog extension 1.1.1 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the BE User Log bekobeuserlog extension 1.1.1 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4608

CVE-2015-4608 is an XSS vulnerability in TYPO3 BE User Log (beko_beuserlog) extension, affecting version 1.1.1 and earlier. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CNVD notes that attackers could obtain sensitive information or h...

CVE-2015-4608

Cross-site scripting XSS vulnerability in the BE User Log bekobeuserlog extension 1.1.1 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...