Co-work Space Search Script 1.0 - 'city' SQL Injection

Exploit Title: Co-work Space Search Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/co-work-space-search-script/ Demo: http://ordermanagementscript.com/demo/co-work-space/ Version: 1.0...

hibamp3.co XSS vulnerability

Open Bug Bounty ID: OBB-448571 Description| Value ---|--- Affected Website:| hibamp3.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gudangmovies21.co XSS vulnerability

Open Bug Bounty ID: OBB-447695 Description| Value ---|--- Affected Website:| gudangmovies21.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

JVN#78501037: Movable Type plugin A-Member and A-Reserve vulnerable to SQL injection

A-Member and A-Reserve provided by ARK-Web co., ltd. are plugins for Movable Type which provide functions to build a membership website or a reservation website. A-Member and A-Reserve contain SQL injection CWE-89 vulnerability due to the issue in processing cookie values. Impact An attacker who...

trust.sproutit.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-432216 Description| Value ---|--- Affected Website:| trust.sproutit.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

mzansicareers.co.za XSS vulnerability

Open Bug Bounty ID: OBB-427245 Description| Value ---|--- Affected Website:| mzansicareers.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

co-unnan.jp XSS vulnerability

Vulnerable URL: http://co-unnan.jp/work/searchcompany.php?cid=/%27%22-%20-!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5268861 VIP website status:|...

co-ax.com XSS vulnerability

Open Bug Bounty ID: OBB-410811 Description| Value ---|--- Affected Website:| co-ax.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

JVN#71284826: Installer of HYPER SBI may insecurely load Dynamic Link Libraries

HYPER SBI provided by SBI SECURITIES Co.,Ltd. is a trading tool. Installer of HYPER SBI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer...

portfolio.mezoo.co.il XSS vulnerability

Open Bug Bounty ID: OBB-355854 Description| Value ---|--- Affected Website:| portfolio.mezoo.co.il Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

co-creator.net XSS vulnerability

Open Bug Bounty ID: OBB-336661 Description| Value ---|--- Affected Website:| co-creator.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WECON Technology Co., Ltd. LeviStudio HMI Editor

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: WECON Technology Co., Ltd. WECON Equipment: LeviStudio HMI Editor Vulnerabilities: Stack-based Buffer Overflow AFFECTED PRODUCTS The following versions of LEVI Studio HMI Editor, an HMI programming software product, a...

co-creator.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-325857 Description| Value ---|--- Affected Website:| co-creator.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

co-industri.dk XSS vulnerability

Vulnerable URL: http://co-industri.dk/DA/CO-industri/SekretariatAdministration/layouts/15/viewlsts.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11652828 VIP...

Fraudulent Donations Lead to Disbanding of Hutchins Legal Defense Fund

A legal defense fund established to ease Marcus Hutchins’ attorney costs has been disbanded after a sizable number of fraudulent donations were discovered. Hutchins, known as Malware Tech, is facing six counts for his alleged involvement in creating and distributing the Kronos banking malware. Th...

Ukrainian Man Arrested, Charged in NotPetya Distribution

The Cyber Police of Ukraine arrested a suspect they allege distributed the destructive NotPetya/ExPetr malware resulting in the infection of 400 computers. NotPetya/ExPetr was the malware behind a massive global cyberattack that took place earlier this year. It infected computers worldwide with...

SQL Injection Vulnerability in Agricultural Products Quality and Safety Monitoring Information System of Shanghai Fubo Agricultural Technology Co.

Agricultural products quality and safety monitoring information system is to make full use of Internet technology to the agricultural products food quality and safety testing stations points testing data networked centralized processing. Shanghai Fubo Agricultural Technology Co., Ltd. agricultura...

concejo-sanantoniodeltequendama-cundinamarca.gov.co XSS vulnerability

Open Bug Bounty ID: OBB-272391 Description| Value ---|--- Affected Website:| concejo-sanantoniodeltequendama-cundinamarca.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-7...

CVE-2017-9597

The "Blue Ridge Bank and Trust Co. Mobile Banking" by Blue Ridge Bank and Trust Co. app 3.0.1 -- aka blue-ridge-bank-and-trust-co-mobile-banking/id699679197 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2017-9597

The CVE-2017-9597 entry concerns the iOS app “Blue Ridge Bank and Trust Co. Mobile Banking” (Blue Ridge Bank and Trust Co. app 3.0.1; id699679197) where SSL certificate verification is not performed. This results in potential MITM exposure where an attacker could spoof servers and obtain sensitiv...