marc-o-polo.com XSS vulnerability

Open Bug Bounty ID: OBB-280807 Description| Value ---|--- Affected Website:| marc-o-polo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Friday Squid Blogging: Squid and Chips

The excellent Montreal chef Marc-Olivier Frappier, of Joe Beef fame, has created a squid and chips dish for Brit & Chips restaurant. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Movie Portal Script 7.36 - Multiple Vulnerabilities

Movie Portal Script 7.36 - Multiple Vulnerabilities Exploit Title : Movie Portal Script v7.36 - Multiple Vulnerability Google Dork : - Date : 20/01/2017 Exploit Author : Marc Castejon Vendor Homepage : http://itechscripts.com/movie-portal-script/ Software Link: http://movie-portal.itechscripts.co...

VMSA-2016-0024:vSphere Data Protection (VDP) update addresses SSH key-based authentication issue

VMSA-2016-0024.1 vSphere Data Protection VDP updates address SSH Key-Based authentication issue VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0024.1 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: vSphere Data Protection VDP updates addres...

SQL Injection Vulnerability in Marc Parameters of Shenzhen Ketu Automation New Technology Application Company ilasIII Digital Library System xk/zdframe.jsp Page

Integrated Library Automation System ILAS is the Ministry of Culture in 1988 as a national key scientific and technological projects issued by the Shenzhen Library to undertake and organize the development of a set of libraries at home and abroad to adapt to different levels, a variety of scales,...

Joomla HTTP Header Unauthenticated Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Joomla HTTP Header Unauthenticated Remote Code Execution', 'Description' = %q Joomla suffers from an unauthenticated remote code...

marc-challet.com XSS vulnerability

Vulnerable URL: http://www.marc-challet.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VI...

Jetpack <= 3.7.0 - Stored Cross-Site Scripting (XSS)

Jetpack versions 3.7.0 and earlier are vulnerable to a cross-site scripting vulnerability in the contact form due to improper input sanitization. Reported by Marc-Alexandre Montpas from Sucuri...

Debian Security Advisory DSA 3332-1 (wordpress - security update)

Several vulnerabilities have been fixed in Wordpress, the popular blogging engine. CVE-2015-2213 SQL Injection allowed a remote attacker to compromise the site. CVE-2015-5622 The robustness of the shortcodes HTML tags filter has been improved. The parsing is a bit more strict, which may affect yo...

Debian DLA-48-1 : bind9 security update

Fix denial of service attack when processing NSEC3-signed zone queries, fixed by not calling memcpy with overlapping ranges in bin/named/query.c. - patch backported from 9.8.6-P2 by Marc Deslauriers from the Ubuntu Security team for USN-2081-1. NOTE: Tenable Network Security has extracted the...

Webmedia Explorer 6.13.1 Stored Cross Site Scripting Vulnerability

No description provided by source. Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably prior versions Vendor...

Ipswitch IMail 5.0/6.0 Web Service Buffer Overflow DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/505/info The IMail web server can be crashed by requesting an abnormally long URL. Telnet to target machine, port 8383 Send: GET /glob1/ Where glob1 is 3000 characters. Marc Maiffret [email protected] has released the followi...

Sun JRE/SDK 1.x Untrusted Applet Java Security Model Violation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7824/info It has been reported that the Sun Java Runtime Environment does not properly protect trusted java applets. Because of this, it may be possible for an attacker to use a malicious applet to gain access to sensitiv...

Fedora Update for perl-MARC-XML FEDORA-2014-1341

Check for the Version of perl-MARC-XML OpenVAS Vulnerability Test Fedora Update for perl-MARC-XML FEDORA-2014-1341 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for perl-MARC-XML FEDORA-2014-1341

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for perl-MARC-XML FEDORA-2014-1326

Check for the Version of perl-MARC-XML OpenVAS Vulnerability Test Fedora Update for perl-MARC-XML FEDORA-2014-1326 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for perl-MARC-XML FEDORA-2014-1326

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: perl-MARC-XML-1.0.2-1.fc19

MARC-XML is an extension to the MARC-Record distribution for working with X ML data encoded using the MARC21slim XML schema from the Library of Congress. For more details see: http://www.loc.gov/standards/marcxml/...

[SECURITY] Fedora 20 Update: perl-MARC-XML-1.0.2-1.fc20

MARC-XML is an extension to the MARC-Record distribution for working with X ML data encoded using the MARC21slim XML schema from the Library of Congress. For more details see: http://www.loc.gov/standards/marcxml/...

Fedora 20 : perl-MARC-XML-1.0.2-1.fc20 (2014-1341)

Bump to 1.0.2 to address XML external entity exploit CVE-2014-1626 per https://metacpan.org/source/GMCHARLT/MARC-XML-1.0.2/ChangesL3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...