nanoware-media.eu XSS vulnerability

Open Bug Bounty ID: OBB-228175 Description| Value ---|--- Affected Website:| nanoware-media.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

eur-lex.europa.eu XSS vulnerability

Vulnerable URL: http://eur-lex.europa.eu/legal-content/DA/TXT/?toc=%3C/SCript%3E%3CsvG/onLoad=prompt%28%22OPENBUGBOUNTY%22%29%3E=uriserv:OJ.C.2012.326.01.s002.01.DAN Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:...

Malware exploit: Poisonivy

Type: Stack Buffer Overflow Author: Gal Badishi This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Tcp def...

SAP Solman 7.31 Information Disclosure

Application: SAP Solman Versions Affected: SAP Solman 7.1-7.31 Vendor URL: http://SAP.com Bugs: Information Disclosure Sent: 12.07.2016 Reported: 13.07.2016 Vendor response: 13.07.2016 Date of Public Advisory: 13.09.2016 Reference: SAP Security Note 2344524 Author: Roman Bezhan ERPScan Descriptio...

SAP Solman - user accounts disclosure CVE-2016-10005

Application: SAP Solman Versions Affected: SAP Solman 7.1-7.31 Vendor URL: SAP Bugs: Information Disclosure Reported: 12.07.2016 Vendor response: 13.07.2016 Date of Public Advisory: 13.09.2016 Reference: SAP Security Note 2344524 Author: Roman Bezhan ERPScan VULNERABILITY INFORMATION CVE-2016-100...

eu-nomen.eu XSS vulnerability

Vulnerable URL: http://www.eu-nomen.eu/portal/search.php?search=adv=WebSearchName=beginsSearch="===220="=0=0=0SearchAdv=Search Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2282960 VIP website status:| No Check...

OAuth 2.0 Hack Exposes 1 Billion Mobile Apps to Account Hijacking

Third-party applications that allow single sign-on via Facebook and Google and support the OAuth 2.0 protocol, are exposed to account hijacking. Three Chinese University of Hong Kong researchers presented at Black Hat EU last week a paper called “Signing into One Billion Mobile LApp Accounts...

WhatsApp Blasted by EU Data Protection Group Over Facebook Sharing

Yet another privacy coalition is urging WhatsApp to clarify that user information shared between the company and Facebook is compliant with data protection laws on the books in Europe. The Article 29 Working Party, comprised of representatives from data protection authorities from each EU member...

The vulnerability of the microprogrammed Ethernet converter software from Vlinx, VESP 211-232-EU and Vlinx VESP 211-EU, which allows a hacker to perform administrative actions.

The vulnerability of the web interface of the microprogramming-based Ethernet converter software Vlinx VESP 211-232-EU and Vlinx VESP 211-EU is related to access control implementation errors. Exploiting this vulnerability allows a malicious actor to perform administrative actions using modified...

EU Struggles to Determine Growing Cost of Cyberattacks

After painstakingly calculating the true cost of cybercrime in the European Union researchers conclude it’s nearly impossible to come up with hard numbers. In a study released this week by the European Union Agency For Network And Information Security ENISA researchers assert that it’s vitally...

lenovo-eu-en.custhelp.com XSS vulnerability

Vulnerable URL: https://lenovo-eu-en.custhelp.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:20 GMT Vulnerability type:| XSS...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/social/search.jsp?mainCat=1=1226=0=0=0=0=0==test=advancedSubmit=en=%22%3E%3Cimg%20src=null%20onerror=prompt/OPENBUGBOUNTY/%3E= Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:40 GMT Vulnerability type:| XS...

What you need to know: Navigating EU Data Protection changes – EU-US Privacy Shield and EU General Data Protection Regulation

If youre an organization with trans-Atlantic presence that transmits and stores European citizen data e.g. employee payroll & HR data, client & prospect data in the U.S. you will want to pay attention. What we will discuss was administered under the European Unions Data Protection Directive and a...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/newsroom/dae/subscription-quick-generic-form-fullpage.cfm?serviceid=167=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/taxationcustoms/dds2/seed/news/newstaren.jsp?Lang=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 08.07.2016 Latest check for patch:| 08.07.2016 15:30 GMT Vulnerability type:| XSS Vulnerability status:|...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/competition/elojade/isef/index.cfm?casenumber=%22%3E%3Ch1%3EXSS%3C/h1%3E%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 10:56 GMT Vulnerability...

trade.ec.europa.eu XSS vulnerability

Vulnerable URL: http://trade.ec.europa.eu/doclib/cfm/doclibresults.cfm?key=EU%20Visa=1=20=all=News=1=20=1&year1;=01/01/2015&year2;=01/01/2016=all=all=EN%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS...

ec.europa.eu XSS vulnerability

Vulnerable URL: http://ec.europa.eu/regionalpolicy/hu/atlas/managing-authorities//?search=1=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=2=BG=RGE++ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...

EU FTL Calculator - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application EU FTL Calculator published at the 'play' market has multiple vulnerabilities...

Advantech/B+B SmartWorx VESP211-EU and VESP211-232 Arbitrary Command Execution Vulnerability

The Advantech/B+B SmartWorx VESP211-EU and VESP211-232 are both Advantech China interfaces for connecting serial devices to Ethernet. An arbitrary command execution vulnerability exists in the Advantech/B+B SmartWorx VESP211-EU and VESP211-232, which could allow a remote attacker to perform...