UBUNTU-CVE-2016-1617

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easie...

Google to Speed Up Chrome for Fast Internet Browsing

Google is planning to make Chrome faster in order to provide its users fast Internet browsing experience. Thanks to a new, open-source data and web compression algorithm for the Internet called Brotli, which Google announced last year to boost its web page performance. With Brotli, Google will...

asebio.com XSS vulnerability

Vulnerable URL: http://www.asebio.com/en/tagelements.cfm?tag=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1215810 Google Pagerank| 0...

agroguide.nl Open Redirect vulnerability

Vulnerable URL: http://www.agroguide.nl/modules/babel/redirect.php?newlang=nlNL=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

cartovillage.com Open Redirect vulnerability

Vulnerable URL: http://www.cartovillage.com/click.php?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 20406936 Google Pagerank| 0 VIP website...

auto33.ru XSS vulnerability

Vulnerable URL: http://www.auto33.ru/car-credit?photo=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1442867...

chinaorchid.net Open Redirect vulnerability

Vulnerable URL: http://www.chinaorchid.net/asp/Adrotator/goto.asp?ID=14=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:17 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

aces.shu.ac.uk XSS vulnerability

Vulnerable URL: http://aces.shu.ac.uk/employability/index.php?k=15%22%3E%3Csvg/onload=confirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

yorkshire.com XSS vulnerability

Vulnerable URL: http://www.yorkshire.com/whats-on?date=20/01/2016=cool%22/onmouseover=confirm%28%27xssposed%27%29%20x==10 Details: Description| Value ---|--- Patched:| Yes, at 22.02.2016 Latest check for patch:| 22.02.2016 01:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

cruiselinesjobs.com Open Redirect vulnerability

Vulnerable URL: http://www.cruiselinesjobs.com/redirect.php?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 359558 Google Pagerank| 0 VIP website status:| No Check...

claroleague.co.uk XSS vulnerability

Vulnerable URL: http://claroleague.co.uk/ajax/getNextGameSmall.asp?teamname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

rpi-ekhn.de Open Redirect vulnerability

Vulnerable URL: http://www.rpi-ekhn.de/mail2date/ServiceCenter/redirect.php?url=https://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:37 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa...

vistaprint.nl Open Redirect vulnerability

Vulnerable URL: http://www.vistaprint.nl/add-coupon.aspx?redirect=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 75425 Google Pagerank| 0 VIP...

PT-2016-3947

Name of the Vulnerable Software and Affected Versions Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches versions V200R003C00 through V200R003SPH010 and versions V200R005C00 through V200R005SPH007 Huawei S2350EI and S5300LI Campus series switches versions V200R003C00 through...

CVE-2015-8400

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

Hardcoded credentials

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

CVE-2015-8400

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

CVE-2015-8400

Shell In A Box (shellinabox) prior to version 2.19 contains an HTTPS fallback mechanism that allows DNS rebinding attacks via the /plain URL. The vulnerability is triggered when the client can revert HTTPS requests to HTTP, enabling remote attackers to exploit DNS rebinding. Public references in ...

CVE-2015-8400

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

CVE-2015-8400

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...