jakarta-commons-collections security update

0:3.2-2jpp.4 - Fix Java object de-serialization vulnerability - Resolves: CVE-2015-7501...

revistadefilologiaespa XSS vulnerability

Vulnerable URL: http://revistadefilologiaespañola.revistas.csic.es/index.php/rfe/login?loginMessage=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:59 GMT Vulnerability type:| XSS Vulnerability...

app.gao-de.com.cn XSS vulnerability

Vulnerable URL:...

Oracle: Security Advisory (ELSA-2015-2522)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

jakarta-commons-collections security update

0:3.2.1-3.5 - Fix Java object de-serialization vulnerability - Resolves: CVE-2015-7501...

Updated uglify-js packages fix security vulnerability

The UglifyJS node module has a problem where the combination of De Morgan's Law and non-boolean values can lead to a case where code is incorrectly minified, which can lead to possibly malicious minified JS code...

Tor: FBI Paid CMU $1 Million to De-Anonymize Users

More than a year ago, the Tor Project patched its software against a vulnerability being exploited by researchers at Carnegie Mellon University, it said, for the purpose of de-anonymizing users of Tor hidden services. Yesterday, Tor Project director Roger Dingledine accused the prominent Pittsbur...

truckscout24.de XSS vulnerability

Vulnerable URL: http://www.truckscout24.de/search/ger/list.asp?country=D==ger="';--type=1=dateofinsertiondesc====1 Details: Description| Value ---|--- Patched:| Yes, at 02.12.2015 Latest check for patch:| 02.12.2015 18:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

brigitte-de-larochelambert.fr XSS vulnerability

Vulnerable URL: http://www.brigitte-de-larochelambert.fr//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

lesgitesdelapapeterie.com XSS vulnerability

Vulnerable URL: http://www.lesgitesdelapapeterie.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5601998 Google Pagerank| 0 VIP websit...

agences-de-rencontres-pour-agriculteurs.e-monsite.com XSS vulnerability

Vulnerable URL: http://agences-de-rencontres-pour-agriculteurs.e-monsite.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 17.11.2015 Latest check for patch:| 17.11.2015 23:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

avis-de-deces.net XSS vulnerability

Open Bug Bounty ID: OBB-93709 Description| Value ---|--- Affected Website:| avis-de-deces.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

mode58.de XSS vulnerability

Vulnerable URL: http://www.mode58.de/index.php?screen=search=%3C%2fscript%3E%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C%2fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

uhr24.de XSS vulnerability

Vulnerable URL: http://uhr24.de/search/catalog.pl?keyword=%3Cimg%20src%20%3D%20%22asd%22%20onerror%20%3D%20%22alert%28%2fXSSPOSED%2f%29%22%20a Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:40 GMT Vulnerability type:| XSS Vulnerability...

hitradion1.de XSS vulnerability

Vulnerable URL: http://www.hitradion1.de/playlist/neuinplaylist/titel-suche.php Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1183063 Google Pagerank| 4...

observatoiredelafranchise.fr XSS vulnerability

Vulnerable URL: http://www.observatoiredelafranchise.fr/creation-entreprise/moteur-recherche.htm?motRech=%22--%3E+%3C%2Fscript%3E%3Csvg%2Fonload%3D%27%3Balert%28%2FXSSPOSED%2F%29%3B%27%3E&enseigneMd=Choisir+une+enseigne Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check...

bons-de-reduction.com XSS vulnerability

Vulnerable URL: http://www.bons-de-reduction.com/recherche-code-reduction.html?cx=003485060010017930736:q9xjvcbgupu=FORID:11=iso-8859-1=%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 03.11.2015 Latest check for patch:|...

Liferay 6.1.0 CE - Privilege Escalation

Exploit Title: Liferay 6.1.0 CE GA1 Privilege Escalation Date: 18/05/2015 Exploit Author: Massimo De Luca - mentat.is Vendor Homepage: https://www.liferay.com Software Link: http://www.liferay.com/it/community/releases/-/assetpublisher/nSr2/content/id/18060360 Version: 6.1.0 CE Tested on: -...

HackerOne: HackerOne Private Programs users disclosure and de-anonymous-ize

Hi HackerOne Team, I have found a bug in HackerOne Platform allows any attacker to deanonymousize any security researcher using the platform and the most wild usage is to disclose some information about this security researcher if he is invited to a private program or not. Unfortunately HackerOne...

dragonjar.education XSS vulnerability

Vulnerable URL: http://www.dragonjar.education/curso/de-0-a-ninja-con-la-pina-wifi-wifi-pineapple/ Details: Description| Value ---|--- Patched:| Yes, at 11.11.2015 Latest check for patch:| 11.11.2015 01:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5196921...