May 2016 security update release

Today we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and advisories can be found in the Security...

CVE-2016-1077

creationtimestamp| type| source ---|---|--- 2016-05-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39799...

server39.000webhost.com XSS vulnerability

Open Bug Bounty ID: OBB-150875 Description| Value ---|--- Affected Website:| server39.000webhost.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

UBUNTU-CVE-2016-2443

The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 26404525...

UBUNTU-CVE-2016-2453

The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 27549705...

CVE-2016-1013

creationtimestamp| type| source ---|---|--- 2016-05-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39778...

lionbrandyarnstudio.com XSS vulnerability

Vulnerable URL: http://www.lionbrandyarnstudio.com/!prettyPhoto/2,/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1002645 VIP website status:| No Check lionbrandyarnstudio.com SSL...

riicotec.org XSS vulnerability

Vulnerable URL: http://www.riicotec.org/crealzheimer06/actualidad/canal/2015/junio/index.htm?ssUserText=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

mariodemiranda.com XSS vulnerability

Vulnerable URL: http://www.mariodemiranda.com Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2604641 VIP website status:| No Check mariodemiranda.com SSL connection:| Grade: A-...

onlytablet.com XSS vulnerability

Vulnerable URL: http://www.onlytablet.com/tagproducts.php?idtag=%27%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E=USD Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

glamorousjewelers.com XSS vulnerability

Vulnerable URL: http://glamorousjewelers.com/tagproducts.php?idtag=%27%22%3E%3Cmarquee/onstart=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2218102...

redcross.ie XSS vulnerability

Vulnerable URL: https://www.redcross.ie/search/?searchkeyword=--%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C%2Fscript%3E%3C!-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 487726 Goog...

wap.sportsline.com Open Redirect vulnerability

Vulnerable URL: http://wap.sportsline.com/s/dropDownList.do?dropdownLink=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

joematarazzo.southwestfl.carringtonrealestate.com XSS vulnerability

Vulnerable URL: http://joematarazzo.southwestfl.carringtonrealestate.com/results-gallery/?postalcode=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 15.03.2016 Latest check for patch:| 15.03.2016 01:31 GMT Vulnerability type:| XSS Vulnerability...