CVE-2017-16959

The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP heade...

CVE-2017-16959

The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP heade...

CVE-2017-1000199

tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handlerqcow.so resulting in non-privileged users being able to check for existence of any file with root privileges...

CVE-2017-1000199

tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handlerqcow.so resulting in non-privileged users being able to check for existence of any file with root privileges...

GHSA-H56M-VWXC-3QPW Directory traversal vulnerability in actionpack

Directory traversal vulnerability in actionpack/lib/actiondispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.21, 4.0.x before 4.0.12, 4.1.x before 4.1.8, and 4.2.x before 4.2.0.beta4, when servestaticassets is enabled, allows remote attackers to determine the existence o...

actionpack vulnerable to Path Traversal

Directory traversal vulnerability in actionpack/lib/actiondispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.20, 4.0.x before 4.0.11, 4.1.x before 4.1.7, and 4.2.x before 4.2.0.beta3, when servestaticassets is enabled, allows remote attackers to determine the existence o...

ideenmitfarbe.de XSS vulnerability

Vulnerable URL: http://ideenmitfarbe.de/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

esterline.com XSS vulnerability

Vulnerable URL: https://www.esterline.com/Portals/3/Multimedia//player.swf?tracecall=alert%22OPENBUGBOUNTY%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 588433 VIP website...

geniaus.net XSS vulnerability

Vulnerable URL: http://www.geniaus.net/browsemedia.php?mediasearch=bug=headstones=Relatives=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

gas-dortmund.de XSS vulnerability

Vulnerable URL: http://www.gas-dortmund.de/index-gas.php?lan=1=401 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2556095 VIP website status:| No Coordinated Disclosure Timeline:...

solarandled.nl XSS vulnerability

Vulnerable URL: http://www.solarandled.nl/search.php?s=1%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20SrcSet=K%20/;%20OnError=confirmopenbugbounty%20//%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS...

educacional.net XSS vulnerability

Vulnerable URL: http://www.educacional.net/comum/detectaflash/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

skideep.net XSS vulnerability

Vulnerable URL: http://www.skideep.net/mountainhigh/gallery/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

myilwon.com XSS vulnerability

Vulnerable URL: http://myilwon.com/bbs/viewimg.php?img=xss%22%20onerror=prompt/openbugbounty/%20%22=1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13182029...

hotelprofessionals.nl XSS vulnerability

Vulnerable URL: https://www.hotelprofessionals.nl/vacatures-resultaat/?keywords%5Ballwords%5D="--!%5Bgeo%5D%5Blocation%5D=%5Bgeo%5D%5Bradius%5D=any Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability...

webwasp.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.webwasp.co.uk/tutorials/b17-detect-player-7/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Ale...

To expose the spike Trend Micro multiple products RCE vulnerability flaws bug-a vulnerability warning-the black bar safety net

The framework of the network security of ever more and more give rise to a network security staff to the presence of dependents, for example, the Apache Struts case because within the framework of a wide range of vulnerabilities flaws bug the excitation of the network hits the firing presumably...

educacao-rodoviaria.pt Open Redirect vulnerability

Vulnerable URL: http://www.educacao-rodoviaria.pt/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

movoco.fr Open Redirect vulnerability

Vulnerable URL: http://movoco.fr/momo/portejoie.org/gallery/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

mervers.be Open Redirect vulnerability

Vulnerable URL: http://www.mervers.be/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...