excellenceauditing.com XSS vulnerability

Open Bug Bounty ID: OBB-459031 Description| Value ---|--- Affected Website:| excellenceauditing.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

President’s Cybersecurity Executive Order

On May 11, 2017, President Trump released the Presidential Executive Order on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure. This E.O. -- while stand alone in focus --should be seen in the context of a greater move in the Executive Branch to elevate the awareness...

Stored Cross-site Scripting Vulnerability in Template/View.aspx Page of Shanghai Excellence Ruixin Digital Technology Co.

Excellence Course Center System is a teaching and learning system specially developed by Shanghai Excellence Ruixin Digital Technology Co. for teaching in colleges and universities. A stored cross-site scripting vulnerability exists in the comments of the Template/View.aspx page of the Excellence...

CVE-2014-7111

The Android Excellence aka an.exc.ap application 1.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Android Excellence aka an.exc.ap application 1.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7111

CVE-2014-7111 affects the Android Excellence (aka an.exc.ap) application 1.4.1 for Android. The vulnerability is that it does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. The conne...

PT-2014-7777

Name of the Vulnerable Software and Affected Versions Android Excellence aka an.exc.ap version 1.4.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

CVE-2014-7111: Undefined Security Weakness

The Android Excellence aka an.exc.ap application 1.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Joomla Multi Calendar 4.0.2 Cross Site Scripting

Hello, Multiple cross-site scripting XSS vulnerabilities in Multi calendar 4.0.2 component for Joomla! allow remote attackers to inject arbitrary web script or HTML code via 1 the calid parameter to index.php or 2 the paletteDefault parameter to index.php. File: /tmpl/layouteditevent.php Lines: 1...

A CISO's Guide To Application Security – Part 3: Toward an AppSec Center of Excellence

This post is the third in a 4-part series on Application Security, or “AppSec”. The series will define the components of a sound AppSec program, delineate the growing threats to software, weigh the costs of a data breach, and outline the CISO’s responsibility in managing software security risk...

Open Source Awards 2011 launched - "Recognizing excellence in open source"

Open Source Awards 2011 launched - "Recognizing excellence in open source" The 'Packt Open Source Awards 2011' have been announced. Formerly the Open Source CMS Award, the contest has been running since 2006 and, according to a press release sent to .net, is "regarded as one of the most establish...

Open Source Awards 2011 launched - "Recognizing excellence in open source"

Open Source Awards 2011 launched - "Recognizing excellence in open source" The 'Packt Open Source Awards 2011' have been announced. Formerly the Open Source CMS Award, the contest has been running since 2006 and, according to a press release sent to .net, is "regarded as one of the most establish...