aoserver4.com XSS vulnerability

Vulnerable URL: http://aoserver4.com/webview/index.php?name=" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7414081 VIP website status:| No Check...

pornotube20.com XSS vulnerability

Open Bug Bounty ID: OBB-229991 Description| Value ---|--- Affected Website:| pornotube20.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

PT-2017-18315

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The Binary File Descriptor library is prone to an invalid read of size 4 due to NULL pointer dereferencing of bfd elf large com section. This issue causes programs that analyze binary programs using the...

house178.com XSS vulnerability

Open Bug Bounty ID: OBB-229379 Description| Value ---|--- Affected Website:| house178.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mrc07.com XSS vulnerability

Vulnerable URL: http://www.mrc07.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13671240...

Exploiting .NET Managed DCOM

Posted by James Forshaw, Project Zero One of the more interesting classes of security vulnerabilities are those affecting interoperability technology. This is because these vulnerabilities typically affect any application using the technology, regardless of what the application actually does. Als...

McAfee VirusScan Enterprise Denial of Service Vulnerability

McAfee VirusScan Enterprise is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A security vulnerability exists in Scriptscan COM Object in McAfee...

cafe24.com XSS vulnerability

Vulnerable URL: http://www.cafe24.com/?controller=domainsearch=hangul="'--!search= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2710 VIP website status:| Yes Check cafe24.com SSL...

Memory corruption

A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link...

CVE-2016-8030

A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link...

CVE-2016-8030

A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link...

CVE-2016-8030: Improper Restriction of Operations within the Bounds of a Memory Buffer

A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link...

print24.com XSS vulnerability

Vulnerable URL: http://print24.com/de/?sid=ee80de5ee926bd5f1c562603ba6b83fc=kalkulierenpg=="onmouseover=alertString.fromCharCode88,83,83,80,79,83,69,68"==login Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:|...

yd1688.com XSS vulnerability

Vulnerable URL: http://www.yd1688.com/en/about.php?id='" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16561817 VIP website status:| No Check yd1688.com...

VirtualBox 5.0.32 r112930 x64 - Windows Process COM Injection Privilege Escalation Exploit

Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1103 VirtualBox: Windows Process COM Injection EoP Platform: VirtualBox v5.0.32 r112930 x64 Tested on Windows 10 Class: Elevation of Privilege Summary: The process hardening...

VirtualBox 5.0.32 r112930 x64 - Windows Process COM Injection Privilege Escalation Exploit

Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1103 VirtualBox: Windows Process COM Injection EoP Platform: VirtualBox v5.0.32 r112930 x64 Tested on Windows 10 Class: Elevation of Privilege Summary: The process hardening...

mariner7.com XSS vulnerability

Vulnerable URL: https://mariner7.com/SendEmail.asp?email="'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22315450 VIP website status:| No Check mariner7.com SSL connection:|...

Oracle VM VirtualBox 5.0.32 r112930 (x64) - Windows Process COM Injection Privilege Escalation

Oracle VM VirtualBox 5.0.32 r112930 x64 - Windows Process COM Injection Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1103 VirtualBox: Windows Process COM Injection EoP Platform: VirtualBox v5.0.32 r112930 x64 Tested on Windows 10 Class: Elevation of...

PT-2017-8550

Name of the Vulnerable Software and Affected Versions Geeklog IVYWE edition version 2.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML, leveraging the use of the COM getCurrentURL function in various template files, including 1 public...

Oracle VM VirtualBox 5.0.32 r112930 (x64) - Windows Process COM Injection Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1103 VirtualBox: Windows Process COM Injection EoP Platform: VirtualBox v5.0.32 r112930 x64 Tested on Windows 10 Class: Elevation of Privilege Summary: The process hardening implemented by the VirtualBox driver can be circumvented ...