CVE-2017-9589

CVE-2017-9589 affects the iOS app “SCSB Shelbyville IL Mobile Banking” (version 3.0.0, app ID id938960224). The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man‑in‑the‑middle to spoof servers and obtain sensitive information via a crafted certifica...

CVE-2017-9589

The "SCSB Shelbyville IL Mobile Banking" by Shelby County State Bank app 3.0.0 -- aka scsb-shelbyville-il-mobile-banking/id938960224 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

CVE-2017-9591

The CVE-2017-9591 entry refers to the iOS app PCB Mobile (Phelps County Bank) version 3.0.2 (pcb-mobile/id436891295) failing to verify X.509 certificates from SSL servers. This creates a vulnerability where a remote attacker could perform a man-in-the-middle attack to spoof servers and exfiltrate...

CVE-2017-9591

The "PCB Mobile" by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2017-19051

Name of the Vulnerable Software and Affected Versions Phelps County Bank app version 3.0.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates from SSL servers...

columbiacountylodging.com XSS vulnerability

Vulnerable URL: http://columbiacountylodging.com/innsearchGET.php?searchtext=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Friday Squid Blogging: Live Squid Washes up on North Carolina Beach

A "mysterious squid" -- big and red -- washed up on a beach in Carteret County, North Carolina. Someone found it, still alive, and set it back in the water after taking some photos of it. Squid scientists later decided it was a diamondback squid. So, you think that O'Shea might know the identity ...

gcdcimmigrationrecords.galvestoncountytx.gov XSS vulnerability

Vulnerable URL: http://gcdcimmigrationrecords.galvestoncountytx.gov/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

jeffersoncountyapps.jeffersoncountywi.gov XSS vulnerability

Vulnerable URL: https://jeffersoncountyapps.jeffersoncountywi.gov/jc/public/customPrograms/ShowDocument.php?file=/UserFiles/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

butlercountytimesgazette.com XSS vulnerability

Open Bug Bounty ID: OBB-198143 Description| Value ---|--- Affected Website:| butlercountytimesgazette.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

co.berks.pa.us XSS vulnerability

Open Bug Bounty ID: OBB-197015 Description| Value ---|--- Affected Website:| co.berks.pa.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

co.larimer.co.us XSS vulnerability

Vulnerable URL: http://www.co.larimer.co.us/ASSESSOR/query/results.cfm?schedulenumber== Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 19:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

gloucestercountynj.gov XSS vulnerability

Vulnerable URL: http://www.gloucestercountynj.gov/civica/admin/loginverify.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 844450 VIP website status:| No Check...

somersetcountygazette.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-178177 Description| Value ---|--- Affected Website:| somersetcountygazette.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

madisoncountyrealty.com XSS vulnerability

Vulnerable URL: http://www.madisoncountyrealty.com/listings.php?listingtype=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4679971...

brownco.k12.in.us XSS vulnerability

Open Bug Bounty ID: OBB-161624 Description| Value ---|--- Affected Website:| brownco.k12.in.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

butlercountytreasurer.org XSS vulnerability

Vulnerable URL: http://www.butlercountytreasurer.org/egov/apps/locations/facilities.egov?fromLink==%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3Etype=0 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:35 GMT Vulnerability type:...

webmail.morgan-county.net XSS vulnerability

Vulnerable URL: http://webmail.morgan-county.net/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

washingtoncountyga.governmentwindow.com XSS vulnerability

Vulnerable URL: https://washingtoncountyga.governmentwindow.com/userlogin.html?backurl=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS...

baycountyfl.gov XSS vulnerability

Vulnerable URL: http://www.baycountyfl.gov/cgi-bin/webdatapro.pl?cgifunction=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...