namaquawestcoast.com XSS vulnerability

Vulnerable URL: http://www.namaquawestcoast.com/accommodation/town.php?town=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3Estrandfontein Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

causewaycoasttour.com XSS vulnerability

Vulnerable URL: http://causewaycoasttour.com/wp-content/plugins/rezgo-online-booking-new/framerouter.php?mode=pagedetails=%3C/title%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:32 GMT...

Crime Coast: Gang Wars - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Crime Coast: Gang Wars published at the 'play' market has multiple vulnerabilities...

ivorycoast.afrium.com XSS vulnerability

Vulnerable URL: http://ivorycoast.afrium.com/browse-business-cities/char:A" Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

CVE-2014-7077

The Gulf Coast Educators FCU aka com.metova.cuae.gcefcu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Gulf Coast Educators FCU aka com.metova.cuae.gcefcu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7077

The Gulf Coast Educators FCU aka com.metova.cuae.gcefcu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7077

CVE-2014-7077 affects the Gulf Coast Educators FCU Android app (package com.metova.cuae.gcefcu) version 1.0.27. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate...

Heartbleed and other heartaches

Security Heartbleed and other heartaches Share April 11th, 2014 As has been reported extensively already, OpenSSL just fixed a serious vulnerability, dubbed Heartbleed. OpenSSL is used in a variety of products used on the internet, including Opera products and servers. We want to share with you h...

Gold Coast Web Design SQL Injection

Exploit Title : Gold Coast Web Design Sql Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : http://goldcoastwebdesign.com Contact : [email protected] , [email protected] Security Risk : High Dork ...

Gold Coast Web Design SQL Injection

Title: Gold Coast Web Design SQL Injection Author: AngelParrot Date: 2011/12/19 Category: Webapps Vendor: http://goldcoastwebdesign.com/ Google Dork: inurl:php?id= intext:"web site by: goldcoastwebdesign.com" Exploit http://example.com/news.php?MenuID=SQL...

Lost BP Laptop Contains Financial Information on Thousands of Gulf Oil Spill Victims

Almost a year has passed since the Deepwater Horizon oil rig exploded and spewed three months of oil into the Gulf of Mexico. But less than six months after the beleaguered oil giant managed to cap that well, it is contending with a new spill of a different sort: the loss of personal information ...

2CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ================================ 2CMS SQL Injection Vulnerability ================================ Exploit Title: 2CMS SQL Injection Vulnerability Software Site: http://www.2creative.com.au/ CVE : N/A Author: Ashiyane Digital Security Team...

Audit Shows Flaws in Coast Guard System

Flaws in the configuration and security of the U.S. Coast Guard IT system caused a material weakness in the Department of Homeland Security financial system, according to a recent audit. Read the full article. Dark Reading...

A recap of the 2nd OWASP conference

The second Open Web Application Security Project OWASP Conference held on the Gold Coast is regarded as the leading Web Application Security conference within the Asia Pacific region attracting both Australian and overseas speakers and attendees. The conference continued its community atmosphere...

CVE-2008-4735

Concord Asset, Software, and Ticket system (CoAST) 0.95 is affected. The vulnerability is a PHP remote file inclusion in header.php, exploitable via the sections_file parameter, enabling remote code execution by supplying a URL. Root cause: unvalidated sections_file leads to PHP code execution. I...

CoAST 0.95 (sections_file) Remote File Inclusion Vulnerability

No description provided by source. Author : By DaRkLiFe Greetz : str0ke & S.VV.A.T. Script : The Concord Asset, Software, and Ticket systemCoAST 0.95 Remote File Inclusion Vulnerability Download :http://downloads.sourceforge.net/coastal/coast-0.95.tgz?modtime=1222363198&bigmirror=0 Exploit :...

CoAST 0.95 - sections_file Remote File Inclusion

CoAST 0.95 - sectionsfile Remote File Inclusion Author : By DaRkLiFe Greetz : str0ke & S.VV.A.T. Script : The Concord Asset, Software, and Ticket systemCoAST 0.95 Remote File Inclusion Vulnerability Download :http://downloads.sourceforge.net/coastal/coast-0.95.tgz?modtime=1222363198&bigmirror=0...

CoAST 0.95 (sections_file) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================== CoAST 0.95 sectionsfile Remote File Inclusion Vulnerability ============================================================== Script : The Concord Asset, Software, and Ticket...

CoAST 0.95 - 'sections_file' Remote File Inclusion

Author : By DaRkLiFe Greetz : str0ke & S.VV.A.T. Script : The Concord Asset, Software, and Ticket systemCoAST 0.95 Remote File Inclusion Vulnerability Download :http://downloads.sourceforge.net/coastal/coast-0.95.tgz?modtime=1222363198&bigmirror=0 Exploit :...