petromaxindustries.com XSS vulnerability

Vulnerable URL: http://petromaxindustries.com/inquiry.php?id=27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12974965 VIP website status:| No Check petromaxindustries.com SSL...

taylorprotraining.com XSS vulnerability

Vulnerable URL: http://www.taylorprotraining.com/course-inquiry.php?id=28%22%27--!%3E%3C/Title/%3C/Style/%3C/Script/%3C/Textarea/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CBody/OnPageShow=confirmOPENBUGBOUNTY%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017...

louise-alexander.com XSS vulnerability

Vulnerable URL: http://www.louise-alexander.com/inquiry/?caption=Guy+Bourdin=xss%3C/textarea%3E%3Csvg/onload=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

SemCms foreign trade website management system has SQL injection vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms php version of the use of the php language written in conjunction with apache, in window, or linux system ...

CVE-2017-1236

IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inquiry. IBM X-Force ID: 124354...

CVE-2017-1236: Improper Input Validation

IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inquiry. IBM X-Force ID: 124354...

Threat Outbreak Alert RuleID29585: Email Messages Distributing Malicious Software on June 26, 2017

Medium Alert ID: 54315 First Published: 2017 June 26 19:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29585 may contain the following files: Name | Siz...

inquiry.princetonreview.com XSS vulnerability

Vulnerable URL: http://inquiry.princetonreview.com/away/?value=josaiintlhub2=FS=%22/%3E%3CsvG/onLoad=alert%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

OneThird CMS vulnerable to cross-site scripting

Overview OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability CWE-79 due to an issue in processing the inquiry form. Note that this vulnerability is different from JVN49408248. Satoshi Takagi of Cryptography Laboratory,Department of Information and Communication...

JVN#13003724: OneThird CMS vulnerable to cross-site scripting

OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability CWE-79 due to an issue in processing the inquiry form. Impact An arbitrary script may be executed on the logged in user's web browser. Solution Update the Software Update to the latest version according to the...

event.asrock.com XSS vulnerability

Vulnerable URL: http://event.asrock.com/inquiry/?Model= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check event.asrock.com SSL...

Stored Cross-Site Scripting Vulnerability in DBSHOP_0.9.3_Beta

DBShop is an open source e-commerce online store system developed using endFramework. A stored cross-site scripting vulnerability exists at DBSHOP0.9.3Beta /module/Goods/view/goods/ask/index.phtml. Due to the failure to handle the output to the page of the inquiry response, the content is directl...

Threat Outbreak Alert RuleID21457: Email Messages Distributing Malicious Software on March 9, 2016

Medium Alert ID: 43961 First Published: 2016 March 9 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21457 may contain the following files: Name | Siz...

Updated ruby-mail packages fix security vulnerability

The Mail library does not impose a length limit on email addresses, so an attacker can send a long spam message via a recipient address unless there is a limit on the application's side. The attacker-injected message in the recipient address is processed by the server. This type of vulnerability...

Threat Outbreak Alert RuleID20063: Email Messages Distributing Malicious Software on December 13, 2015

Medium Alert ID: 42650 First Published: 2015 December 14 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20063 may contain the following files: Name |...

Threat Outbreak Alert RuleID19771: Email Messages Distributing Malicious Software on December 1, 2015

Medium Alert ID: 42422 First Published: 2015 December 1 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19771 may contain the following files: Name |...

Threat Outbreak Alert RuleID19181: Email Messages Distributing Malicious Software on November 17, 2015

Medium Alert ID: 42134 First Published: 2015 November 18 14:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19181 may contain the following files: Name |...

Threat Outbreak Alert RuleID16129: Email Messages Distributing Malicious Software on June 23, 2015

Medium Alert ID: 39480 First Published: 2015 June 23 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16129 may contain the following files: Name | Siz...

Congress Looking Into Restricting Power of Government-Owned CAs

UPDATE–As the debate over potential government interference with encryption technologies rages in countries around the world, Congress is now going down a different path, asking technology companies whether it’s feasible and potentially effective for certificate authorities to restricting the way...

Threat Outbreak Alert RuleID13387: Email Messages Distributing Malicious Software on February 3, 2015

Medium Alert ID: 37329 First Published: 2015 February 3 15:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13387 may contain the following files: Name |...