EUVD-2008-0593

Malware in sbrugna...

metacafe.com XSS vulnerability

Open Bug Bounty ID: OBB-679286 Description| Value ---|--- Affected Website:| metacafe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

metacafe.com XSS vulnerability

Open Bug Bounty ID: OBB-643433 Description| Value ---|--- Affected Website:| metacafe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

metacafe.com XSS vulnerability

Open Bug Bounty ID: OBB-232768 Description| Value ---|--- Affected Website:| metacafe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

metacafe.com XSS vulnerability

Open Bug Bounty ID: OBB-184819 Description| Value ---|--- Affected Website:| metacafe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

metacafe.com XSS vulnerability

Vulnerable URL: http://www.metacafe.com/videosabout/%22%20onmouseover=alert%28'xssposed'%29%20%22/ Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5124...

metacafe.com XSS vulnerability

Vulnerable URL: http://www.metacafe.com/tags/?searchText=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

metacafe.com XSS vulnerability

Vulnerable URL: http://www.metacafe.com/videosabout/xss'"/ Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3926 Google Pagerank| 6 VIP website status:| Yes...

Social Media v2.0.0 LFI Vulnerabilities

Exploit for php platform in category web applications ======================================= Social Media v2.0.0 LFI Vulnerabilities =======================================...

CVE-2008-0583

Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Description and unspecified other metadata...

Cross site scripting

Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Description and unspecified other metadata...

CVE-2008-0583

CVE-2008-0583 describes a cross-zone scripting vulnerability in the Internet Explorer web control used by Skype 3.6.0.244 and older 3.5.x/3.6.x builds. The issue allows user-assisted remote attackers to inject arbitrary web script or HTML into the Local Machine Zone via metadata fields (Descripti...

CVE-2008-0583: Improper Control of Generation of Code

Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Description and unspecified other metadata...

Cross site scripting

Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Title field of a 1 Dailymotion and possibly 2...

CVE-2008-0454

Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Title field of a 1 Dailymotion and possibly 2...

CVE-2008-0454

The CVE-2008-0454 entry concerns Skype on Windows where cross-zone scripting is possible through the Internet Explorer web control. Specifically, in Skype 3.6.0.244 (and earlier 3.5.x/3.6.x), a user-assisted attacker could inject arbitrary web script/HTML in the Local Machine Zone via the Title f...

foxnews-xss.txt

Foxnews 0day XSS Shock Attack Demo link to send to a fish: http://www.foxnews.com/video2/launchPage.html?http://localhost/ With netcat listen on localhost : listening on any 80 ... connect to localhost 127.0.0.1 from localhost 127.0.0.1 1964 GET...