dpreview.com XSS vulnerability

Vulnerable URL: https://www.dpreview.com/members/8618821799/overview Details: Description| Value ---|--- Patched:| Yes, at 09.10.2016 Latest check for patch:| 09.10.2016 22:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1624 VIP website status:| Yes...

CVE-2016-6433

creationtimestamp| type| source ---|---|--- 2016-10-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40463 2017-01-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41041 2018-05-29 15:50:33+00:00| seen|...

CVE-2016-0189

creationtimestamp| type| source ---|---|--- 2016-10-02 16:51:25+00:00| seen| MISP/57f12c6a-5864-4abb-8207-5a60646d1a36 2017-08-23 20:52:05+00:00| published-proof-of-concept| https://t.me/SHATOOB/1973 2017-08-30 07:57:15+00:00| seen| MISP/59a66b5f-28b0-45c2-8bf6-06bcbce2ab96 2018-03-27...

CVE-2016-5284

Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org...

CVE-2016-5284

Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org...

Mozilla Patching Firefox Certificate Pinning Vulnerability

Mozilla is expected tomorrow to patch a critical vulnerability in Firefox’s automated update process for extensions that should put the wraps on a confusing set of twists surrounding this bug. The flaw also affected the Tor Browser and was patched Friday by the Tor Project. The vulnerability firs...

madisonsquarepark.org XSS vulnerability

Vulnerable URL: https://www.madisonsquarepark.org/?s=%27;alert0//%5C%27;alert1//%22;alert2//%5C%22;alert+3//--%3E%3C/SCRIPT%3E%22%3E%27+%3E%3CSCRIPT%3Ealert/XSSPOSED/%3C/SCRIPT%3E=&%7B%7D%22;%7Dalert6+;function+xss%7B// Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

procaz.fr XSS vulnerability

Vulnerable URL: http://www.procaz.fr/recherche.php Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6078054 VIP website status:| No Check procaz.fr SSL...

CVE-2015-8931

Undefined behavior signed integer overflow was discovered in libarchive, in the MTREE parser's calculation of maximum and minimum dates. A crafted mtree file could potentially cause denial of service...

webmail.cyberspazio.org XSS vulnerability

Vulnerable URL: https://webmail.cyberspazio.org/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

broward.desire2learn.com XSS vulnerability

Vulnerable URL: https://broward.desire2learn.com/frame.asp?Pg=javascript:alert%28%27OPENBUGBOUNTY%27%29 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3708 VIP website status:| Yes Check broward.desire2learn.com...

Moodle < 2.7.13 / 2.8.x < 2.8.11 / 2.9.x < 2.9.5 / 3.0.x < 3.0.3 Multiple Vulnerabilities

Binary data 9194.prm...

FreeBSD : moodle -- multiple vulnerabilities (a430e15d-f93f-11e5-92ce-002590263bf5)

Marina Glancy reports : - MSA-16-0003: Incorrect capability check when displaying users emails in Participants list - MSA-16-0004: XSS from profile fields from external db - MSA-16-0005: Reflected XSS in moddata advanced search - MSA-16-0006: Hidden courses are shown to students in Event Monitor ...

Sneaker Release Dates - Dynamic Code Loading, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Sneaker Release Dates published at the 'play' market has multiple vulnerabilities...

moodle -- multiple vulnerabilities

Marina Glancy reports: MSA-16-0003: Incorrect capability check when displaying users emails in Participants list MSA-16-0004: XSS from profile fields from external db MSA-16-0005: Reflected XSS in moddata advanced search MSA-16-0006: Hidden courses are shown to students in Event Monitor...

gw-openx.cloudapp.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-137193 Description| Value ---|--- Affected Website:| gw-openx.cloudapp.net Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

CVE-2015-5341

modscorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass intended access restrictions and read SCORM contents via unspecified vectors...

Design/Logic Flaw

modscorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass intended access restrictions and read SCORM contents via unspecified vectors...

CVE-2015-5341

modscorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass intended access restrictions and read SCORM contents via unspecified vectors...

UBUNTU-CVE-2015-5341

modscorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass intended access restrictions and read SCORM contents via unspecified vectors...