arat-forest.be XSS vulnerability

Vulnerable URL: http://www.arat-forest.be/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6037221 Google Pagerank| 0 VIP website status:| No Check...

Security update for Java7 (important)

Update OpenJDK to 7u95 / IcedTea 2.6.4 including the following fixes: Security fixes - S8059054, CVE-2016-0402: Better URL processing - S8130710, CVE-2016-0448: Better attributes processing - S8132210: Reinforce JMX collector internals - S8132988: Better printing dialogues - S8133962,...

CVE-2016-1299

The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service HTTPS outage via crafted HTTPS requests, aka Bug ID CSCuw87174...

Code injection

The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service HTTPS outage via crafted HTTPS requests, aka Bug ID CSCuw87174...

CVE-2016-1299

The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service HTTPS outage via crafted HTTPS requests, aka Bug ID CSCuw87174...

CVE-2016-1299

The CVE-2016-1299 issue affects Cisco Small Business SG300 Managed Switches (web-management GUI) where the handling of HTTPS connections can be exploited by remote attackers to cause a denial of service (HTTPS outage). The vulnerability is associated with the SG300 1.4.1.x family (Bug ID CSCuw871...

chromium-browser: various fixes from internal audits

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easie...

Cisco Small Business SG300 Managed Switch Web Framework GUI Function Denial of Service Vulnerability

A vulnerability in the GUI function in the web framework code of Cisco Small Business SG300 Managed Switches could allow an unauthenticated, remote attacker to cause the HTTPS process to become unresponsive, resulting in a partial denial of service DoS condition. The vulnerability is due to...

Amazon Certificate Manager Brings Free SSL Certs to AWS Users

Amazon is getting into the certificate game. The company announced late last week that it launched a certificate manager to expedite the process of securing SSL/TLS certificates for customers looking to add HTTPS to their sites or apps. The move comes less than a year after Amazon applied to...

KLA10748 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, spoof user interface and execute arbitrary code. Below is a complete list of vulnerabilities 1. Multiple memory safety...

CVE-2016-1617

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easie...

CVE-2016-1617

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easie...

CVE-2016-1617

Removed by vendor...

hotelsdurhamnc.org XSS vulnerability

Vulnerable URL: http://hotelsdurhamnc.org/hotel.php?id=/hotel.php?id=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status...

UBUNTU-CVE-2016-1617

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easie...

Google to Speed Up Chrome for Fast Internet Browsing

Google is planning to make Chrome faster in order to provide its users fast Internet browsing experience. Thanks to a new, open-source data and web compression algorithm for the Internet called Brotli, which Google announced last year to boost its web page performance. With Brotli, Google will...

asebio.com XSS vulnerability

Vulnerable URL: http://www.asebio.com/en/tagelements.cfm?tag=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1215810 Google Pagerank| 0...

agroguide.nl Open Redirect vulnerability

Vulnerable URL: http://www.agroguide.nl/modules/babel/redirect.php?newlang=nlNL=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

cartovillage.com Open Redirect vulnerability

Vulnerable URL: http://www.cartovillage.com/click.php?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 20406936 Google Pagerank| 0 VIP website...

auto33.ru XSS vulnerability

Vulnerable URL: http://www.auto33.ru/car-credit?photo=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1442867...