ersatzteil24.de XSS vulnerability

Vulnerable URL: https://www.ersatzteil24.de/ersatzteil-suche/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 924920 VIP website status:| No Check ersatzteil24.de SSL connection:|...

prettynailshop24.de XSS vulnerability

Vulnerable URL: https://www.prettynailshop24.de/shop/search2.html?queryFromSuggest==%22%3Etrolo%3Ci%3Epwnd%3Cimg+src%3Dy+onerror%3Dprompt%28%27openbugbounty%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:...

fondosdecultura.gob.cl XSS vulnerability

Vulnerable URL:...

aktiv3.de XSS vulnerability

Vulnerable URL: https://www.aktiv3.de/content.php?seite=shop/suche.php=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

videoportal-24.de XSS vulnerability

Open Bug Bounty ID: OBB-219088 Description| Value ---|--- Affected Website:| videoportal-24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-3159

Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws...

Design/Logic Flaw

Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws...

CVE-2017-3159

Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws...

CVE-2017-3159

Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws...

CVE-2017-3159

CVE-2017-3159 affects Apache Camel's camel-snakeyaml component, enabling Java deserialization that can lead to remote code execution when untrusted data is deserialized. The NVD entry assigns a high/critical impact (CVSS v3 base 9.8, NETWORK/LOW complexity, no authentication) with potential execu...

DOJ Dismisses Playpen Case to Keep Tor Hack Private

Intent on keeping details private about how it hacked the Tor browser, prosecutors with the U.S. Department of Justice on Friday asked to dismiss a case involving a suspect who visited the Playpen dark web child pornography site in 2015. “The government must now choose between disclosure of...

sysPass >= 2.0 risky cryptographic algorithm usage Vulnerability

Exploit for php platform in category web applications CVE-2017-5999 - sysPass risky cryptographic algorithm usage Credit: Guenaelle De Julis & Quentin Olagne CVE: CVE-2017-5999 Dates: 14/02/2017 Vendor: sysPass Product: sysPass Versions Affected: = 2.0 Risk / Severity Rating: 4.4 CVSSv2 SysPass...

SUSE-SU-2017:0554-1 Security update for util-linux

This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges bsc1023041. This non-security issues were fixed: - lscpu: Implement WSL...

rio.rj.gov.br XSS vulnerability

Vulnerable URL: http://www.rio.rj.gov.br/web/guest/resultado?parambusca=a"...

st-jean-de-luz.brithotel.fr XSS vulnerability

Vulnerable URL: http://st-jean-de-luz.brithotel.fr/mapframe.php?lat=;...

CVE-2016-8749

It was found that Apache Camel's camel-jackson and camel-jacksonxml components are vulnerable to Java object de-serialisation vulnerability. Camel allows such a type through the 'CamelJacksonUnmarshalType' property. De-serializing untrusted data can lead to security flaws as demonstrated in vario...

nu3.de XSS vulnerability

Vulnerable URL: https://www.nu3.de/pasta-reis/?more=1" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 101648 VIP website status:| No Coordinated Disclosure Timeline: Description|...

aircraft24.de XSS vulnerability

Vulnerable URL: https://www.aircraft24.de/search/search-jet.htm?SHOWADID=124770=7=1ADTYPEID=JCURRENCYID=EURPRICEMAX=85000000ORDERBY=ADPRICEEUR=98 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:52 GMT Vulnerability type:| XSS Vulnerability...

r23.de XSS vulnerability

Vulnerable URL: https://www.r23.de/index.php/mp/user/file/login Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1815327 VIP website status:| No Check r23.de SSL connection:| Grade: ...

nu3.de XSS vulnerability

Vulnerable URL: https://www.nu3.de/catalog/?q="-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100164 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...