October 27, 2016 — KB3197954 (OS Build 14393.351)

None None...

affiliates.aff247.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-189143 Description| Value ---|--- Affected Website:| affiliates.aff247.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

e56.com XSS vulnerability

Vulnerable URL: http://www.e56.com/quotation?TargetCountry=AZ=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=0=10=10=10=AZ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

care2.com XSS vulnerability

Vulnerable URL: http://www.care2.com/find/site Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7424 VIP website status:| Yes Check care2.com SSL connection:| Grade: F Coordinated...

Microsoft Windows Diagnostics Hub - DLL Load Privilege Escalation (MS16-125)

Microsoft Windows Diagnostics Hub - DLL Load Privilege Escalation MS16-125 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=887 Windows: Diagnostics Hub DLL Load EoP Platform: Windows 10 10586, not tested 8.1 Update 2 or Windows 7 Class: Elevation of Privilege Summary: The fix...

ar15.com XSS vulnerability

Vulnerable URL: http://www.ar15.com/member/forgot.html?a=fetch" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 19:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6281 VIP website status:| Yes Check ar15.co...

hmm21.com XSS vulnerability

Open Bug Bounty ID: OBB-185464 Description| Value ---|--- Affected Website:| hmm21.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

seowhy7.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-185366 Description| Value ---|--- Affected Website:| seowhy7.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

ar15.com XSS vulnerability

Vulnerable URL: http://www.ar15.com/about/help.html?error=5" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5999 VIP website status:| Yes Check ar15.com S...

Microsoft Windows 8.1 Update 2 / 10 10586 (x86/x64) - NtLoadKeyEx User Hive Attachment Point Privilege Escalation (MS16-111)

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=865 Windows: NtLoadKeyEx User Hive Attachment Point EoP Platform: Windows 10 10586 32/64 and 8.1 Update 2, not tested Windows 7 Class: Elevation of Privilege Summary: The NtLoadKeyEx system call allows an unprivileged user to loa...

mw1950.com XSS vulnerability

Vulnerable URL: http://mw1950.com/search/?q=请输入关键词=1=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13605 VIP website status:| Yes Check mw1950.com SSL connection:| Grade: F Coordinated Disclosure...

lawyer.110.com XSS vulnerability

Open Bug Bounty ID: OBB-183441 Description| Value ---|--- Affected Website:| lawyer.110.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

ghadir2016.com XSS vulnerability

Vulnerable URL: http://ghadir2016.com/users/signup.php?utype=admin" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3755019 VIP website status:| No Check ghadir2016.com SSL connection:| Grade: A Coordinated...

iiec2017.com XSS vulnerability

Vulnerable URL: http://iiec2017.com/users/signup.php?utype=admin" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3346691 VIP website status:| No Check...

f1000.com XSS vulnerability

Vulnerable URL: http://f1000.com/prime/search/faculty?query=" Details: Description| Value ---|--- Patched:| Yes, at 08.01.2017 Latest check for patch:| 08.01.2017 14:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 99205 VIP website status:| No Check f1000.com...

Ali wangwang 2010 remote code execution vulnerability

漏洞复现 阿里旺旺2010版本的ImageMan.dll动态链接库中，有一个COM接口负责处理图片信息，其中有一个函数AutoPic存在漏洞，当在html中加载这个COM接口，并传入特殊字符串时，会由于对字符串长度没有进行检查，在拷贝时读取到不可用地址，从而导致程序进入SEH异常处理，通过超长payload可以覆盖SEH指针从而达到eip可控的效果，下面对此漏洞进行详细分析。 首先安装阿里旺旺2010，之后用IE打开，发现IE崩溃，通过附加windbg，可以到达漏洞崩溃位置。 a5c.628: Access violation - code c0000005 first chance...

forever21.com XSS vulnerability

Open Bug Bounty ID: OBB-182080 Description| Value ---|--- Affected Website:| forever21.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

blog.java1234.com XSS vulnerability

Open Bug Bounty ID: OBB-180291 Description| Value ---|--- Affected Website:| blog.java1234.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

szzs360.com XSS vulnerability

Vulnerable URL: http://www.szzs360.com/news/search.asp?words=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1096697 VIP...

kulr8.com XSS vulnerability

Open Bug Bounty ID: OBB-178677 Description| Value ---|--- Affected Website:| kulr8.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...