Microsoft Windows Multiple Vulnerabilities (KB4022722)

This host is missing a critical security update according to Microsoft KB4022722 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows COM Session Elevation of Privilege Vulnerability

An elevation of privilege exists in Windows when a DCOM object in Helppane.exe, configured to run as the interactive user, fails to properly authenticate the client. An attacker who successfully exploited the vulnerability could run arbitrary code in another user's session. To exploit the...

KLA11842 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

Joomla COM_ALPHACONTENT SQL Injection Vulnerability

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla COMALPHACONTENT version 4.0.11, which can be exploited by attackers to obtain sensitive database information...

goodav17.com XSS vulnerability

Vulnerable URL: http://goodav17.com/search/...

porn555.com XSS vulnerability

Open Bug Bounty ID: OBB-246630 Description| Value ---|--- Affected Website:| porn555.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

apk250.com XSS vulnerability

Open Bug Bounty ID: OBB-246594 Description| Value ---|--- Affected Website:| apk250.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hosting24.com XSS vulnerability

Vulnerable URL: https://www.hosting24.com/webmaillogin.php?action=login Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 85113 VIP website status:| Yes Coordinated Disclosure Timelin...

everybodydrives1.com XSS vulnerability

Vulnerable URL: https://everybodydrives1.com/applyshort.php?stockid=4-2-107069915295-3278068-08383-269995752885689"'--! Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

CVE-2017-0213 Windows COM elevation of privilege vulnerability-vulnerability warning-the black bar safety net

CVE-2017-0213 Windows COM elevation of privilege vulnerability components take a look at this vulnerability: Windows COM Aggregate Marshaler in the realization of the presence of Privilege escalation vulnerability allows a remote attacker to elevate privileges to execute arbitrary code. Vernacula...

porn555.com XSS vulnerability

Open Bug Bounty ID: OBB-245838 Description| Value ---|--- Affected Website:| porn555.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

shayari7.com XSS vulnerability

Vulnerable URL: http://www.shayari7.com/search?q=%22%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 358767 VIP website status:| ...

news18.com XSS vulnerability

Vulnerable URL: http://www.news18.com/livecricket/squad-ipl.php?tid=1379=3823%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E=eoin-morgan=hyderabad Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:|...

CVE-2017-0199: in-depth analysis of the Microsoft Office RTF vulnerability-vulnerability warning-the black bar safety net

Recently, researchers also found a number of CVE-2017-0199 vulnerability of the sample. Although the Microsoft in this year 4 month has been released for the vulnerability the patch, but since its use is relatively simple, worldwide usage is still very high, here to share some of the phishing...

0594333.com XSS vulnerability

Vulnerable URL: http://www.0594333.com/"...

my903.com XSS vulnerability

Vulnerable URL: http://www.my903.com/my903/903music/search.jsp?keywords=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 79037 VIP website...

goodav17.com XSS vulnerability

Vulnerable URL: http://goodav17.com/search/%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E%20/6/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 40377 VIP website status:|...

philatelie72.com XSS vulnerability

Vulnerable URL: http://www.philatelie72.com/Materiel/Philatelie/detailmat.asp?cat=1%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus%20/;%20Onfocus=alertOPENBUGBOUNTY%20//%3E%3CSvg%3E=556=YVERT%20et%20TELLIER Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017...

boss339.com XSS vulnerability

Vulnerable URL: http://boss339.com/partnumber.php?partnumber=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

boss330.com XSS vulnerability

Vulnerable URL: http://boss330.com/partnumber.php?partnumber=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...