adzine.de XSS vulnerability

Vulnerable URL: https://www.adzine.de/suche/?q=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dy+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Draft folder emails in Secure Mail not syncing with MS Exchange

Q: Users create drafts in Secure Mail but these do not get synced with MS Exchange and viewable in Outlook. After repeated attempts to amend and save the draft it will be deleted without being synced. Is this a known issue? A: With regard to the Draft folder syncing, there are limitation regardin...

quechoisir.org XSS vulnerability

Vulnerable URL: https://www.quechoisir.org/utils/recherche/?keyword='"/alert"openbugbounty"...

CVE-2016-9459

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment...

openSUSE Security Update : xtrabackup (openSUSE-2017-382)

This update to xtrabackup 2.3.7 fixes one security issue and bugs. The following security issue was fixed : - innobackupex and xtrabackup scripts were showing the password in the ps output when it was passed as a command line argument boo1026729 The following functionality was added : - new...

kann.de XSS vulnerability

Vulnerable URL: https://www.kann.de/privat/suche/?searchterms=as'"trolotruli Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 760176 VIP website status:| No Check kann.de SSL...

Open redirect

Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header...

qoo10.com XSS vulnerability

Vulnerable URL: https://www.qoo10.com/s/?keyword='--!'...

qoo10.hk XSS vulnerability

Vulnerable URL: https://www.qoo10.hk/s/?keyword='--!'...

[SECURITY] DLA-862-1: sitesummary regression update

Package : sitesummary Version : 0.1.8+deb7u2 Debian Bug : 852623 The fix for CVE-2016-8743 in apache2 2.2.22-13+deb7u8 DLA-841-1 caused 852623 in sitesummary, breaking the sitesummary-upload functionality. To address this sitesummary-upload needs to be changed to send CRLF \r\n line endings to be...

idhost.kz XSS vulnerability

Vulnerable URL: http://idhost.kz/site/search?q=%27;%22%3E;;--%3E%3C/SCRIPT%3E-%3C/style%3E-%3C/title%3E-%3C/BoDy%3E-%3Cmarquee%3E-%3Ch1%3EOmniGooch%3C/h1%3E-%3C/marquee%3E-%3Csvg/onload=alert%27XSSPOSED%27;%3E;%27/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.20...

mfa.gov.by XSS vulnerability

Vulnerable URL: http://mfa.gov.by/search/?what="...

theaterverzeichnis.de XSS vulnerability

Vulnerable URL: http://www.theaterverzeichnis.de/suche.php?suche='"--!'...

wittlich-luexem.de XSS vulnerability

Vulnerable URL: http://www.wittlich-luexem.de/suche.php?suche='"--!'...

lyz.de XSS vulnerability

Vulnerable URL: https://www.lyz.de/suche.php?suche='"--!'...

CVE-2017-6381

A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies aren't normal installed. You might be vulnerabl...

fitland.nl XSS vulnerability

Vulnerable URL: http://www.fitland.nl/?s='"--!confirmopenbugbounty...

CVE-2017-6816

In WordPress before 4.7.3 wp-admin/plugins.php, unintended files can be deleted by administrators using the plugin deletion functionality...

ze.nl XSS vulnerability

Vulnerable URL: http://www.ze.nl/zoeken?s= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 337148 VIP website status:| No Check ze.nl SSL connection:| Grade: A- Coordinated Disclosure Timeline: Description| Value...

bdct.nhs.uk XSS vulnerability

Vulnerable URL: http://www.bdct.nhs.uk/?s='"--!confirmopenbugbounty...