DiskBoss Enterprise - GET Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'DiskBoss Enterprise GET Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability i...

UBUNTU-CVE-2016-8882

The jpcdectilefini function in libjasper/jpc/jpcdec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

netwijs.nl XSS vulnerability

Vulnerable URL: http://www.netwijs.nl/asp/invado.asp?t=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=13 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1837353 VIP website status:| N...

chita.ru5.info XSS vulnerability

Vulnerable URL: http://chita.ru5.info/search.php?txt=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

UBUNTU-CVE-2016-1964

Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging mishandling of XML transformations...

Integer overflow

Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via crafted data with brotli compression...

CVE-2016-1624

Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via crafted data with brotli compression...

UBUNTU-CVE-2016-1624

Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via crafted data with brotli compression...

hea.edu.au Open Redirect vulnerability

Vulnerable URL: http://www.hea.edu.au/umbraco/newsletterstudio/tracking/trackclick.aspx?url=http://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 2092018...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt58

3:11-alt58 built Dec. 29, 2015 Sergey V Turchin in task 155487 Dec. 29, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643,...

Adobe Flash Player Multiple Vulnerabilities -01 (Dec 2015) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt58

3:11-alt58 built Dec. 29, 2015 Sergey V Turchin in task 155486 Dec. 29, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643,...

snopes.com XSS vulnerability

Vulnerable URL: http://www.snopes.com/search/?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 06.02.2016 Latest check for patch:| 06.02.2016 01:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1972...

chw.net vulnerability

Vulnerable URL: http://www.chw.net/foro/vbseocp.phpcustom301" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 16988 Google Pagerank| 4 VIP website status:| Yes Check chw.net SSL connection:| Grade: A...

prq.ru vulnerability

Vulnerable URL: http://www.prq.ru/analiz/status.html?url=xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 5582360 Google Pagerank| 2 VIP website status:| No Check prq.ru SSL connection:| Grade: ...

4allforum.com vulnerability

Vulnerable URL: http://4allforum.com/away.php?to=http%3A%2F%2Fxssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 154147 Google Pagerank| 2 VIP website status:| No Check 4allforum.com SSL...

dailyrepublic.com XSS vulnerability

Vulnerable URL: http://www.dailyrepublic.com/sponsor/?url=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Mozilla Firefox ESR Multiple Vulnerabilities (Dec 2015) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

dev.hedgeconnection.com XSS vulnerability

Vulnerable URL: http://dev.hedgeconnection.com/atlas/linkedinlogin.php?error=accessdenieddescription=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=1430202846 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Public...

poweruy.incosa.com.uy XSS vulnerability

Vulnerable URL: http://poweruy.incosa.com.uy/wiki/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 08.03.2016 Latest check for patch:| 08.03.2016 22:31 GMT Vulnerability type:| XSS...