131 matches found
EUVD-2018-17543
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2018-5776
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp- includes/js/mediaelement. CVE-2018-5776 Note that Nessus relies on the...
GHSA-277W-QPXR-2549 MediaElement Vulnerable to Reflected XSS
Cross-site scripting XSS vulnerability in flash/FlashMediaElement.swf in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by "jsinitfunctio%gn."...
WordPress 4.6.x < 4.6.4 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists in the wpplaylistshortcode function within the /wp-includes/media.php script due to a failure to validate input passed via...
les-drones.com XSS vulnerability
Open Bug Bounty ID: OBB-680320 Description| Value ---|--- Affected Website:| les-drones.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| WordPress Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sunsofttechies.com XSS vulnerability
Open Bug Bounty ID: OBB-680161 Description| Value ---|--- Affected Website:| sunsofttechies.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| WordPress Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
cftr.ca XSS vulnerability
Open Bug Bounty ID: OBB-680131 Description| Value ---|--- Affected Website:| cftr.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| WordPress Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
zorgeloosch.nl XSS vulnerability
Open Bug Bounty ID: OBB-675923 Description| Value ---|--- Affected Website:| zorgeloosch.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
tortus.nl XSS vulnerability
Open Bug Bounty ID: OBB-675829 Description| Value ---|--- Affected Website:| tortus.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sainsburyshome.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-675541 Description| Value ---|--- Affected Website:| sainsburyshome.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
gzc-bsh.nl XSS vulnerability
Open Bug Bounty ID: OBB-675538 Description| Value ---|--- Affected Website:| gzc-bsh.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mrtimesaver.nl XSS vulnerability
Open Bug Bounty ID: OBB-675537 Description| Value ---|--- Affected Website:| mrtimesaver.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
jachtservicedewaterman.nl XSS vulnerability
Open Bug Bounty ID: OBB-675505 Description| Value ---|--- Affected Website:| jachtservicedewaterman.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
adam1.scripts.mit.edu XSS vulnerability
Open Bug Bounty ID: OBB-675504 Description| Value ---|--- Affected Website:| adam1.scripts.mit.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
csgjusticecenter.org XSS vulnerability
Open Bug Bounty ID: OBB-616248 Description| Value ---|--- Affected Website:| csgjusticecenter.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress 4.2.3 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
LocalTapiola: Flash-based XSS on mediaelement-flash-audio-ogg.swf of www.lahitapiolarahoitus.fi
Basic report information Summary: The lahitapiolarahoitus.fi contains an SWF-file which is vulnerable to reflected cross-site scripting attacks via crafted URL. Description: The file https://www.lahitapiolarahoitus.fi/wp-includes/js/mediaelement/mediaelement-flash-audio-ogg.swf contains a...
southcom.mil XSS vulnerability
Open Bug Bounty ID: OBB-560284 Description| Value ---|--- Affected Website:| southcom.mil Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
jcs.mil XSS vulnerability
Open Bug Bounty ID: OBB-560218 Description| Value ---|--- Affected Website:| jcs.mil Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
inherentresolve.mil XSS vulnerability
Open Bug Bounty ID: OBB-559280 Description| Value ---|--- Affected Website:| inherentresolve.mil Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
andersen.af.mil XSS vulnerability
Open Bug Bounty ID: OBB-559277 Description| Value ---|--- Affected Website:| andersen.af.mil Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...