m-sym.com XSS vulnerability

Vulnerable URL: http://www.m-sym.com/news.php?id=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

PT-2017-9182

Name of the Vulnerable Software and Affected Versions Dropbear SSH versions prior to 2016.74 Description The issue allows remote attackers to execute arbitrary code via crafted arguments, specifically the -m or -c argument. Recommendations For versions prior to 2016.74, update to version 2016.74 ...

Swiss Army Knife for Mac OS X: m-cli

Swiss Army Knife for Mac OS X m-cli differs from other mac command line tools in that: Its main purpose is to manage administrative tasks and do it easier It doesn’t install 3rd party tools because it doesn’t have dependencies The installation is very easy and doesn’t require intervention It only...

m-tk.info XSS vulnerability

Vulnerable URL: http://m-tk.info/wireframes/jobsdiebewegen/?Page=javascript:alert%28/OPENBUGBOUNTY/%29 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

m-mmm.fr XSS vulnerability

Vulnerable URL: http://www.m-mmm.fr/content/search?q=%3C/h2%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3778685 VIP website...

Siemens SCALANCE M-800/S615 Web Vulnerability

OVERVIEW Siemens has identified a web security vulnerability in Siemen’s SCALANCE M-800 and S615 modules. This vulnerability was reported directly to Siemens by Alexander Van Maele and Tijl Deneut from HOWEST. Siemens has produced a new firmware version to mitigate this vulnerability. AFFECTED...

Ubiquiti Network Gear Targeted By Worm

ISP equipment maker Ubiquiti Networks is fending off a stubborn worm targeting its networking equipment running outdated AirOS firmware. According to security experts, the worm is already being blamed for crippling networking gear in the Argentina, Brazil, Spain and the United States. Ubiquiti...

m-xi.com XSS vulnerability

Vulnerable URL: http://www.m-xi.com/statics/front/js/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Chec...

EMC ViPR SRM - Cross-Site Request Forgery

Exploit for php platform in category web applications !-- EMC M&R Watch4net lacks Cross-Site Request Forgery protection Abstract It was discovered that EMC M&R Watch4net does not protect against Cross-Site Request Forgery CSRF attacks. A successful CSRF attack can compromise end user data and may...

EMC ViPR SRM - Cross-Site Request Forgery

!-- EMC M&R Watch4net lacks Cross-Site Request Forgery protection Abstract It was discovered that EMC M&R Watch4net does not protect against Cross-Site Request Forgery CSRF attacks. A successful CSRF attack can compromise end user data and may allow an attacker to perform an account hijack. If th...

M-Drill - Suspicious files, WebView JavaScript enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application M-Drill published at the 'play' market has multiple vulnerabilities...

Debian DSA-3555-1 : imlib2 - security update

Several vulnerabilities were discovered in imlib2, an image manipulation library. - CVE-2011-5326 Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. - CVE-2014-9771 It was discovered that an integer overflow could lead to invalid memory reads a...

PT-2016-3516

Name of the Vulnerable Software and Affected Versions systemd versions prior to 214 Description The issue concerns weak permissions for journal files under /run/log/journal/%m and /var/log/journal/%m, allowing local users to obtain sensitive information by reading these files. Recommendations For...

PT-2016-4042

Name of the Vulnerable Software and Affected Versions systemd versions prior to 229 Description The issue concerns weak permissions for the /var/log/journal/%m/system.journal file, allowing local users to read the file and obtain sensitive information. Recommendations For versions prior to 229,...

Siemens Industrial Products glibc Library Vulnerability (Update C)

OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...

Lothian Buses M-Tickets - Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Lothian Buses M-Tickets published at the 'play' market has multiple vulnerabilities...

GrandChase M - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application GrandChase M published at the 'play' market has multiple vulnerabilities...

M Performance Drive Analyser - External URLs, Possible privilege escalation, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application M Performance Drive Analyser published at the 'play' market has multiple vulnerabilities...

M Performance Sound Player - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application M Performance Sound Player published at the 'play' market has multiple vulnerabilities...

Alsat-M - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Alsat-M published at the 'play' market has multiple vulnerabilities...