butik.kattstallet.se XSS vulnerability

Vulnerable URL: http://butik.kattstallet.se/sokresultat?searchwords="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website...

Threat Outbreak Alert RuleID19082: Email Messages Distributing Malicious Software on October 30, 2015

Medium Alert ID: 41876 First Published: 2015 November 2 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19082 and RuleID19082KVR may contain the...

Apple OS X Script Editor Restriction Bypass Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in Script Editor in Apple OS X versions prior to 10.11.1. A remote attacker could...

Serendipity 2.0.2 Cross Site Scripting

Date: 28/10/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Stored XSS Tested on: Windows 8.1 Product: Serendipity Version: 2.0.2 Description: Application is vulnerable to Stored XSS attack. There is a XSS issue in version 2.0.2. and the vulnerable parameters are "Blog name" and...

meteorama.fr XSS vulnerability

Vulnerable URL: http://www.meteorama.fr/s?l=%22/%3E%3Csvg/onload=alert%28%22XSSPOSED%22%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 62505 Google Pagerank| 5 VIP website...

CVE-2015-7007

Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors...

Design/Logic Flaw

Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors...

CVE-2015-7007

CVE-2015-7007 affects Apple OS X Script Editor prior to 10.11.1. The vulnerability allows remote attackers to bypass the intended user confirmation for AppleScript execution via unspecified vectors, enabling arbitrary AppleScript execution without user approval. Impact, per sources, is partial co...

electrolux.com.co XSS vulnerability

Vulnerable URL: http://www.electrolux.com.co/Global-pages/Search-Result-page1/?query=%27|alert%28%27XSSPOSED%27%29|%27 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

br.blouinartinfo.com XSS vulnerability

Vulnerable URL: http://br.blouinartinfo.com/blouinsearch?query=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=1 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

clubphilateliquemaconnais.com XSS vulnerability

Vulnerable URL: http://www.clubphilateliquemaconnais.com/search/site/?q=%3C/title%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:45 GMT Vulnerability type:| XSS Vulnerability status:|...

CVE-2015-5780

The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors...

Design/Logic Flaw

The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors...

CVE-2015-5780

The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors...

Android Security Restriction Bypass Vulnerability

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. A security restriction bypass vulnerability exists in Android versions prior to 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows ...

Threat Outbreak Alert RuleID18354: Email Messages Distributing Malicious Software on September 30, 2015

Medium Alert ID: 41299 First Published: 2015 October 2 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18354 may contain the following files: Name |...

CVE-2015-3858

The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application...

Authorization

The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application...

Gentoo Security Advisory GLSA 201309-19

Gentoo Linux Local Security Checks GLSA 201309-19 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

The vulnerability of Firefox and Firefox ESR browsers allows a hacker to bypass the user’s confirmation process when installing updates.

The vulnerability of the Firefox and Firefox ESR extension installation subsystem is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the user’s confirmation process during the installation of updates, by using specially crafted data...