Joomla com_carocci plugin 'isbn' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'isbn' parameter of the Joomla comcarocci plugin. An attacker can exploit the vulnerability to access or modify database data...

Microsoft Windows - COM Session Moniker Privilege Escalation (MS17-012)

Microsoft Windows - COM Session Moniker Privilege Escalation MS17-012 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1021 Windows: COM Session Moniker EoP Platform: Tested on Windows 10 14393, Server 2012 R2 Class: Elevation of Privilege Summary: When activating an object usi...

Joomla com_virtuemart plugin 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the mainproduct parameter of the Joomla comproduct component. An attacker can exploit the vulnerability to access or modify database data...

Microsoft Windows - COM Session Moniker Privilege Escalation (MS17-012)

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1021 Windows: COM Session Moniker EoP Platform: Tested on Windows 10 14393, Server 2012 R2 Class: Elevation of Privilege Summary: When activating an object using the session moniker the DCOM activator doesn’t check if the current...

MS17-012：Windows COM Session Moniker EoP（CVE-2017-0100）

Description: The COM session moniker allows a user to specify the interactive session that’s to be used when a DCOM object is registered with an AppID with RunAs of “Interactive User”. As switching sessions is not something a normal user can do you’d assume that this would be only accessible to...

Joomla com_easyblog parameter 'id' plugin SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla comeasyblog parameter 'id' plugin. An attacker can exploit the vulnerability to access or modify database data...

fax1.com XSS vulnerability

Vulnerable URL: https://www.fax1.com/isapi/counter.dll?BackgroundColor=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4226428 VIP...

Windows COM Session Elevation of Privilege Vulnerability

An elevation of privilege exists in Windows when a DCOM object in Helppane.exe, configured to run as the interactive user, fails to properly authenticate the client. An attacker who successfully exploited the vulnerability could run arbitrary code in another user's session. To exploit the...

Microsoft Windows COM Elevation of Privilege (MS17-012: CVE-2017-0100)

An elevation of privilege vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way Windows COM session moniker enforces RunAs permissions when registering DCOM objects. A remote attacker can exploit this vulnerability to execute arbitrary code...

paste829.com XSS vulnerability

Vulnerable URL: http://paste829.com/p/82c5a84 Details: Description| Value ---|--- Patched:| Yes, at 13.04.2017 Latest check for patch:| 13.04.2017 00:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 784706 VIP website status:| No Check paste829.com SSL...

notaires35.com XSS vulnerability

Open Bug Bounty ID: OBB-218326 Description| Value ---|--- Affected Website:| notaires35.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

yzf888.com XSS vulnerability

Vulnerable URL: http://www.yzf888.com/privacy-policy-yao.html?p=12344321%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus/%0D/Onfocus=confirmOPENBUGBOUNTY// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

camperclinic2.com XSS vulnerability

Vulnerable URL: http://www.camperclinic2.com/default.asp?page=xAllInventory=%22%3E%3Csvg/onload=alert%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1305998 VIP website status:| No Check...

petaluma360.com XSS vulnerability

Open Bug Bounty ID: OBB-217246 Description| Value ---|--- Affected Website:| petaluma360.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-9892

The esetsdaemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses ...

Joomla com_jdownloads component 'cid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'cid' parameter of the Joomla comjdownloads component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_publication component 'sid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'sid' parameter of the Joomla compublication component. An attacker can exploit the vulnerability to access or modify database data...

m.porn555.com XSS vulnerability

Open Bug Bounty ID: OBB-215439 Description| Value ---|--- Affected Website:| m.porn555.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

paste829.com XSS vulnerability

Vulnerable URL: http://paste829.com/p/05ded1d1f Details: Description| Value ---|--- Patched:| Yes, at 12.04.2017 Latest check for patch:| 12.04.2017 00:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 789688 VIP website status:| No Check paste829.com SSL...

system16.com XSS vulnerability

Vulnerable URL: http://www.system16.com/list.php?type=g=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 557634 VIP...