Adobe Flash MovieClip swapDepth Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within MovieClip's swapDept...

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

''' Source: https://nation.state.actor/mcafee.html Vulnerabilities CVE-2016-8016: Remote Unauthenticated File Existence Test CVE-2016-8017: Remote Unauthenticated File Read with Constraints CVE-2016-8018: No Cross-Site Request Forgery Tokens CVE-2016-8019: Cross Site Scripting CVE-2016-8020:...

airportpedia.net XSS vulnerability

Vulnerable URL: https://www.airportpedia.net/?search=%3Csvg/onload=alertXSSPOSED%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1127150 VIP website status:| No Coordinated...

Nextcloud: Login Hints on Admin Panel

Hi, Hope you are doing fine. I wanted to inform you regarding the enabling of the login hints on your wp-admin panelhttps://nextcloud.com/wp-login.php. Vulnerability: The admin panel shows very "specific" hint information if a hacker tries for a bruteforcing attack. Steps to reproduce: 1. Navigat...

Nextcloud: Files Drop: WebDAV endpoint is leaking existence of resources

The new WebDAV endpoint implementation in 11 is leaking too many informations if one executes a MKCOL or a PUT against an existing item. With Files Drop one should only be able to upload files but not leak any existence of items. Leaking existence using PUT When doing a PUT the expectation is to...

macmillanlearning.com XSS vulnerability

Vulnerable URL: http://www.macmillanlearning.com/catalog/newcatalog.aspx?search="// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 58345 VIP website status:| No Check...

389-ds-base: Information disclosure via repeated use of LDAP ADD operation

An information disclosure flaw was found in 389 Directory Server. A user with no access to objects in certain LDAP sub-tree could send LDAP ADD operations with a specific object name. The error message returned to the user was different based on whether the target object existed or not...

CVE-2016-7227

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of local files via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."...

UBUNTU-CVE-2016-0762

The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note...

affiliates.interpartners.com Open Redirect vulnerability

Vulnerable URL: http://affiliates.interpartners.com/processing/clickthrgh.asp?btag=a4438250b28231=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

cruiselinesjobs.com Open Redirect vulnerability

Vulnerable URL: http://cruiselinesjobs.com/redirect.php?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 484271 VIP website status:| No Check cruiselinesjobs.com SSL...

shibb-idp.georgetown.edu XSS vulnerability

Vulnerable URL: https://shibb-idp.georgetown.edu/idp/profile/Shibboleth/SSO?shire=1=%3Csvg/onload=alert'OPENBUGBOUNTY'%3E=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

el-ahly.com XSS vulnerability

Vulnerable URL: https://www.el-ahly.com/pages/News.aspx?aid="/// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15455 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...

truwindows.com XSS vulnerability

Vulnerable URL: http://truwindows.com/common/sifr/avenir.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

CVE-2016-3267

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of unspecified files via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."...

CVE-2016-3298

Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure...

Microsoft Internet Explorer Remote Information Disclosure Vulnerability

Microsoft Internet Explorer is a popular WEB browser. An information leakage vulnerability exists when Internet Explorer fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk. For the attack to succeed, t...

PT-2016-2902 · Microsoft · Windows Vista +4

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 9 through 11 Internet Messaging API in Windows Vista SP2 Internet Messaging API in Windows Server 2008 SP2 and R2 SP1 Internet Messaging API in Windows 7 SP1 Description: The issue allows remote attackers ...

Files.com: Existence of Folder path by guessing the path through response

Enter the support PIN from your test site: 423088 Enter the name of your test site : https://bugbounty5.brickftp.com Enter the subdomain from your test site : https://bugbounty5.brickftp.com ---- Description Suppose there are 2 Folders in the site Test1 Test2 but a member has only Admin permissio...

rappersvn.net Open Redirect vulnerability

Vulnerable URL: http://rappersvn.net/music/go.php?u=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 483602 VIP website status:| No Check...