truck-trailer24.de XSS vulnerability

Open Bug Bounty ID: OBB-448487 Description| Value ---|--- Affected Website:| truck-trailer24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

On "Advanced" Network Security Monitoring

My TaoSecurity News page says I taught 41 classes lasting a day or more, from 2002 to 2014. All of these involved some aspect of network security monitoring NSM. Many times students would ask me when I would create the "advanced" version of the class, usually in the course feedback. I could never...

Tor: De-anonymization by visiting specially crafted bookmark.

There is a way to import logs in 'about:memory' from local disk, however, tested on windows you can pass a network url that may point to attack controlled server which logs IP's. This connection is done by windows presumably and so doesn't hide real IP of Tor user. 1. Have victim drag and drop an...

fitnessclub-24.de XSS vulnerability

Open Bug Bounty ID: OBB-443328 Description| Value ---|--- Affected Website:| fitnessclub-24.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

dokom21.de XSS vulnerability

Vulnerable URL: https://www.dokom21.de/de/Privatkunden/Service/Kontakt/Rueckrufservice--Kontaktformular.htm Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 919826 VIP website status:| No Coordinated Disclosure...

online.officedepot.de XSS vulnerability

Open Bug Bounty ID: OBB-440648 Description| Value ---|--- Affected Website:| online.officedepot.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ssl-id1.de XSS vulnerability

Open Bug Bounty ID: OBB-440333 Description| Value ---|--- Affected Website:| ssl-id1.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

anstoss24.de XSS vulnerability

Open Bug Bounty ID: OBB-440005 Description| Value ---|--- Affected Website:| anstoss24.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

outlet46.de XSS vulnerability

Open Bug Bounty ID: OBB-440003 Description| Value ---|--- Affected Website:| outlet46.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

webspeicherplatz24.de XSS vulnerability

Open Bug Bounty ID: OBB-432199 Description| Value ---|--- Affected Website:| webspeicherplatz24.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

allnetflat-24.de XSS vulnerability

Open Bug Bounty ID: OBB-429081 Description| Value ---|--- Affected Website:| allnetflat-24.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

leebmann24.de XSS vulnerability

Vulnerable URL: https://www.leebmann24.de/search:query=%22%3E'%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%2Fopenbugbounty%2F%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 05:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

hall9000.de XSS vulnerability

Open Bug Bounty ID: OBB-419302 Description| Value ---|--- Affected Website:| hall9000.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

lotto24.de XSS vulnerability

Open Bug Bounty ID: OBB-418605 Description| Value ---|--- Affected Website:| lotto24.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

convos06.de XSS vulnerability

Open Bug Bounty ID: OBB-417890 Description| Value ---|--- Affected Website:| convos06.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

eckfahne2006.de XSS vulnerability

Open Bug Bounty ID: OBB-417876 Description| Value ---|--- Affected Website:| eckfahne2006.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Xen: unbounded recursion in pagetable de-typing(CVE-2017-15595)

Xen allows pagetables of the same level to map each other as readonly in PV domains. This is useful if a guest wants to use the self-referential pagetable trick for easy access to pagetables by mapped virtual address. When cleaning up a pagetable after the last typed reference to it has been...

Design/Logic Flaw

The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws...

CVE-2017-12634

The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws...

CVE-2017-12634

The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws...