CVSNT 2.0.51d Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVSNT-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ====================== www.march-hare.com www.wincvs.org cvsgui.sourceforge.net Product: ============== CVSNT...

satom.ru XSS vulnerability

Vulnerable URL: http://satom.ru/t/osennie-tovary-13150/?" Details: Description| Value ---|--- Patched:| Yes, at 17.03.2017 Latest check for patch:| 17.03.2017 07:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 46894 VIP website status:| Yes Check satom.ru SSL...

forcerc.com XSS vulnerability

Open Bug Bounty ID: OBB-186438 Description| Value ---|--- Affected Website:| forcerc.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

theticketfairy.com XSS vulnerability

Open Bug Bounty ID: OBB-183985 Description| Value ---|--- Affected Website:| theticketfairy.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

adverts.ie XSS vulnerability

Open Bug Bounty ID: OBB-182465 Description| Value ---|--- Affected Website:| adverts.ie Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

redcrossblood.org XSS vulnerability

Open Bug Bounty ID: OBB-180303 Description| Value ---|--- Affected Website:| redcrossblood.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

newswest9.com XSS vulnerability

Open Bug Bounty ID: OBB-178530 Description| Value ---|--- Affected Website:| newswest9.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

govplanet.com XSS vulnerability

Open Bug Bounty ID: OBB-171753 Description| Value ---|--- Affected Website:| govplanet.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

repositorio.utad.pt XSS vulnerability

Open Bug Bounty ID: OBB-168788 Description| Value ---|--- Affected Website:| repositorio.utad.pt Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

purchase.tickets.com XSS vulnerability

Open Bug Bounty ID: OBB-164738 Description| Value ---|--- Affected Website:| purchase.tickets.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

www2.dexterchaney.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-162067 Description| Value ---|--- Affected Website:| www2.dexterchaney.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

lapeyre.fr XSS vulnerability

Vulnerable URL: https://www.lapeyre.fr/SearchDisplay?storeId=10101=10151=-2=SimpleSearch=2=true=Q==0=12=video%22%3E%3Cscri%2500pt%3Econfirm%28%2FOPENBUGBOUNTY%2F%29%3B%3C%2Fscri%2500pt%3E Details: Description| Value ---|--- Patched:| Yes, at 23.02.2017 Latest check for patch:| 23.02.2017 15:29 GM...

wonderwall.com XSS vulnerability

Open Bug Bounty ID: OBB-158064 Description| Value ---|--- Affected Website:| wonderwall.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

bibblo.se XSS vulnerability

Open Bug Bounty ID: OBB-157218 Description| Value ---|--- Affected Website:| bibblo.se Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Ransomware Activity Spikes in March, Steadily increasing throughout 2016

UPDATE June 15, 2016: This post has been updated to include new data on ransomware activity, which is also now broken down by region. Cyber extortion for financial gain is typically carried out in one of two ways. The first method is a business disruption attack – a category we discussed at lengt...

ipage.com XSS vulnerability

Open Bug Bounty ID: OBB-152387 Description| Value ---|--- Affected Website:| ipage.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

server39.000webhost.com XSS vulnerability

Open Bug Bounty ID: OBB-150875 Description| Value ---|--- Affected Website:| server39.000webhost.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Cisco IOS and IOS XE Software DHCPv6 Relay Denial of Service Vulnerability

A vulnerability in the DHCP version 6 DHCPv6 relay feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 relay messages. An attacker could exploit this...

Cisco IOS Software Network Address Translation Vulnerabilities (cisco-sa-20140326-nat)

The Cisco IOS Software implementation of the Network Address Translation NAT feature contains two vulnerabilities when translating IP packets that could allow an unauthenticated, remote attacker to cause a denial of service condition. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptio...

piletilevi.ee XSS vulnerability

Open Bug Bounty ID: OBB-149314 Description| Value ---|--- Affected Website:| piletilevi.ee Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...