CVE-2015-7410

IBM CVE-2015-7410 affects IBM Sterling B2B Integrator 5.2 (Health Check tool). The vulnerability is due to cookies not being properly handled with HTTPS sessions, enabling cookie hijacking via MITM-type scenarios. Affected product/version: IBM Sterling B2B Integrator 5.2. Remediation/fix: apply t...

Design/Logic Flaw

Remote Artifact Loader RAL in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.2 does not properly use SSL for its HTTPS connection, which allows remote authenticate...

CVE-2015-7441

Remote Artifact Loader RAL in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.2 does not properly use SSL for its HTTPS connection, which allows remote authenticate...

sedl.org XSS vulnerability

Vulnerable URL: https://www.sedl.org/cgi-bin/mysql/eplan/eplan.cgi Details: Description| Value ---|--- Patched:| Yes, at 12.01.2016 Latest check for patch:| 12.01.2016 17:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 232815 Google Pagerank| 6 VIP website...

spaceshare.kr XSS vulnerability

Vulnerable URL: https://spaceshare.kr/login/login.php?redirectUrl=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.03.2016 Latest check for patch:| 21.03.2016 09:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

nvcll.org Open Redirect vulnerability

Vulnerable URL: http://www.nvcll.org/Goto.asp?URL=https://www.xssposed.org/=1607 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| ...

fordpartsuk.com XSS vulnerability

Vulnerable URL: http://www.fordpartsuk.com/shop/search.php?keywords=derp I Я HERPИ DERP Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 255358 Google...

badjojo.com XSS vulnerability

Vulnerable URL: http://www.badjojo.com/?q=Star+Wars+german="recent=week Details: Description| Value ---|--- Patched:| Yes, at 29.03.2016 Latest check for patch:| 29.03.2016 06:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 59858 Google Pagerank| 3 VIP websit...

connect.bloomberg.com XSS vulnerability

Vulnerable URL: http://connect.bloomberg.com/Aprimo/etrack.aspx?DSN=a5487ab3b15de173=9a26cff48c8aac63=e8d7842613e1c04a1fbbb788ac89bba6=9a26cff48c8aac63=1=9a26cff48c8aac63=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 24.05.2016 Latest check for patch:| 24.05.2016...

ir.first-federal.com Open Redirect vulnerability

Vulnerable URL: http://ir.first-federal.com/PDFPageView.aspx?iid=4057533=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 16.03.2016 Latest check for patch:| 16.03.2016 05:28 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...

investors.regencycenters.com Open Redirect vulnerability

Vulnerable URL: http://investors.regencycenters.com/PDFPageView.aspx?iid=103091=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 16.03.2016 Latest check for patch:| 16.03.2016 04:23 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Ale...

data.balticexport.com Open Redirect vulnerability

Vulnerable URL: http://data.balticexport.com/linkredirect.php?link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Googl...

itspublicknowledge.info Open Redirect vulnerability

Vulnerable URL: http://itspublicknowledge.info/nmsruntime/logLink.aspx?linkURL=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:33 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...

politrussia.com Open Redirect vulnerability

Vulnerable URL: http://politrussia.com/go.php?link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 31.05.2016 Latest check for patch:| 31.05.2016 20:39 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 10843 Google Pageran...

Google Search Engine Rank Prefers HTTPS

Nothing in Google’s arsenal carries more weight than its search engine rankings. Pair that weapon with a desire to inspire encrypted connections on the web, and you have a pretty powerful combination. More than a year ago, Google said it was testing a method where a site’s search ranking would be...

conceptoradio.net Open Redirect vulnerability

Vulnerable URL: http://www.conceptoradio.net/goto/https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 3109201 Google Pagerank| 3 VIP website status:|...

am.cms.hhs.gov XSS vulnerability

Vulnerable URL: https://am.cms.hhs.gov/amserver/UI/Login?realm=legacy=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

redbullshop.com XSS vulnerability

Vulnerable URL: https://www.redbullshop.com/en/login/pw/request Details: Description| Value ---|--- Patched:| Yes, at 27.09.2017 Latest check for patch:| 27.09.2017 06:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 229545 Google Pagerank| 5 VIP website...

Imgur: risk of having secure=false in a crossdomain.xml

api.imgur.com permits SWF files on a non-HTTPS server to load data from this HTTPS server. Setting the secure attribute to false could compromise the security offered by HTTPS. In particular, setting this attribute to false opens secure content to snooping and spoofing attacks. The...

kgos.agh.edu.pl XSS vulnerability

Vulnerable URL: http://www.kgos.agh.edu.pl/geostrada/trescliteraturabyregion.php?region=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...