Cross site scripting

WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows remote attackers to conduct cross-domain Flash injection XSF attacks by leveraging code contained within the wp-includes/js/mediaelement/flashmediaelement.swf file...

CVE-2016-9263

WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows remote attackers to conduct cross-domain Flash injection XSF attacks by leveraging code contained within the wp-includes/js/mediaelement/flashmediaelement.swf file...

Equifax Website Hacked To Deliver Malware-bearing Flash Update

By Waqas In May 2017, the website of renowned credit reporting service This is a post from HackRead.com Read the original post: Equifax Website Hacked To Deliver Malware-bearing Flash Update...

CVE-2016-9263

CVE-2016-9263 affects WordPress; the issue arises when domain-based flashmediaelement.swf sandboxing is not used, enabling remote cross-domain Flash injection (XSF) via code in wp-includes/js/mediaelement/flashmediaelement.swf. Connected documents confirm WordPress-related vulnerabilities of this...

CVE-2016-9263

WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows remote attackers to conduct cross-domain Flash injection XSF attacks by leveraging code contained within the wp-includes/js/mediaelement/flashmediaelement.swf file...

Equifax Takes Down Compromised Page Redirecting to Adware Download

Update: Equifax said Thursday afternoon that it was not compromised and instead confirmed it was a third-party partner’s code running on the Equifax site that was serving adware. Below is Equifax’s statement: “Despite early media reports, Equifax can confirm that its systems were not compromised...

Microsoft’s October Patch Batch Fixes 62 Flaws

Microsoft on Tuesday released software updates to fix at least 62 security vulnerabilities in Windows, Office and other software. Two of those flaws were detailed publicly before yesterday's patches were released, and one of them is already being exploited in active attacks, so attackers already...

fedex.com XSS vulnerability

Vulnerable URL: http://fedex.com/us/demo/claimsonline/detect/flashdetection.swf?flashContentURL=javascript:prompt1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 450 VIP website...

xroads.virginia.edu XSS vulnerability

Vulnerable URL: http://xroads.virginia.edu/ma04/wood/mot/html/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

gursey.baruch.cuny.edu XSS vulnerability

Open Bug Bounty ID: OBB-332133 Description| Value ---|--- Affected Website:| gursey.baruch.cuny.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

geometriesofmusic.uchicago.edu XSS vulnerability

Open Bug Bounty ID: OBB-332134 Description| Value ---|--- Affected Website:| geometriesofmusic.uchicago.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cs.kent.edu XSS vulnerability

Vulnerable URL: http://www.cs.kent.edu/dreed/CS10001/2008Homework/HW1A/flashdetection.swf?flashContentURL=javascript:prompt1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

home.uchicago.edu XSS vulnerability

Open Bug Bounty ID: OBB-332125 Description| Value ---|--- Affected Website:| home.uchicago.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

people.aapt.net.au XSS vulnerability

Vulnerable URL: http://people.aapt.net.au/theyan/Vision/flashdetection.swf?flashContentURL=javascript:prompt1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

majosoft.com XSS vulnerability

Vulnerable URL: http://www.majosoft.com/online-games/Pool/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4776344 VIP website...

sysy.com XSS vulnerability

Vulnerable URL: https://www.sysy.com/flash-synapse/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 690351 VIP website status:| N...

burstproofbubble.com XSS vulnerability

Vulnerable URL: http://burstproofbubble.com/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

edifax.com XSS vulnerability

Vulnerable URL: http://edifax.com/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

aoneonline.com XSS vulnerability

Open Bug Bounty ID: OBB-332113 Description| Value ---|--- Affected Website:| aoneonline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gewater.com XSS vulnerability

Vulnerable URL: http://gewater.com/artifacts/media/spiralmembrane/flashdetection.swf?flashContentURL=javascript:alertdocument.domain Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...