financialmirror.com XSS vulnerability

Vulnerable URL: http://www.financialmirror.com/blog-results.php?q=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-thunderbird-45.0-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

Microsoft Windows - Kernel 'win32k.sys' Privilege Escalation (MS14-058)

Exploit for windows platform in category local exploits Sources: https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-lab-exploiting-cve-2014-4113.pdf https://github.com/sam-b/CVE-2014-4113 EDB Mirror: https://www.exploit-db.com/docs/39665.pdf Trigger and exploit code for CVE-2014-4113:...

Mystery of Mirror of Death 1 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mystery of Mirror of Death 1 published at the 'play' market has multiple vulnerabilities...

Mystery of Mirror of Death2 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Mystery of Mirror of Death2 published at the 'play' market has multiple vulnerabilities...

Mirror HD - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Mirror HD published at the 'play' market has multiple vulnerabilities...

Mirror Photo - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Mirror Photo published at the 'play' market has multiple vulnerabilities...

Lidow:mirror collage snap grid - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lidow:mirror collage snap grid published at the 'play' market has multiple vulnerabilities...

Mirror Photo:Editor&Collage - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Mirror Photo:Editor&Collage published at the 'play' market has multiple vulnerabilities...

Mirror Photo Collage Maker - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Mirror Photo Collage Maker published at the 'play' market has multiple vulnerabilities...

Mirror Image - Photo Editor - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Mirror Image - Photo Editor published at the 'play' market has multiple vulnerabilities...

Mirror -Zoom & Bright- - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mirror -Zoom & Bright- published at the 'play' market has multiple vulnerabilities...

Mirror - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mirror published at the 'play' market has multiple vulnerabilities...

Mirror Free - SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Mirror Free published at the 'play' market has multiple vulnerabilities...

Mirror - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mirror published at the 'play' market has multiple vulnerabilities...

Uber: Stored XSS in archive.uber.com Due to Injection of Javascript:alert(0)

archive.uber.com is vulnerable to an XSS due to injection of Javascript:alert0 as the downloadurl or the homepage in the setup.py when generating the .tar.gz. As of PEP 0470, the downloadurl and homepage parameters are depreciated. An example of a setup.py that can exploit this is: python from...

Fedora 22 : qemu-2.3.1-7.fc22 (2015-d5c1048b47)

CVE-2015-7295: virtio-net possible remote DoS bz 1264393 drive-mirror: Fix coroutine reentrance bz 1266936 Fix udp socket 'localaddr' bz 1268708 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

optus.com.au Cross Site Scripting vulnerability OBB-120110

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| optus.com.au ---|--- Open Bug Bounty...

All Vulnerabilities for brd.ro Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| brd.ro ---|--- Open Bug Bounty Program:...

All Vulnerabilities for adweek.com Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| adweek.com ---|--- Open Bug Bounty...