mynasadata.larc.nasa.gov XSS vulnerability

Vulnerable URL: http://mynasadata.larc.nasa.gov/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

appel.nasa.gov XSS vulnerability

Vulnerable URL: http://appel.nasa.gov/grc-rocket-university-7/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

portal.nasa.gov XSS vulnerability

Vulnerable URL: https://portal.nasa.gov/home?ppid=NASA%20XSS%20BY%20MLT--%3E%3Cimg/src=%22%3E%20%22%20onerror=alert%28%27OPENBUGBOUNTY%27%29//%20pstate=maximized Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

NASA Space Weather - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application NASA Space Weather published at the 'play' market has multiple vulnerabilities...

NASA App - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application NASA App published at the 'play' market has multiple vulnerabilities...

NASA HACKED! AnonSec tried to Crash $222 Million Drone into Pacific Ocean

Once again the Red Alarm had been long wailed in the Security Desk of the National Aeronautics and Space Administration NASA. Yes! This time, a serious hacktivism had been triggered by the Hacking group named "AnonSec" who made their presence in the cyber universe by previous NASA Hacks. The...

heasarc.gsfc.nasa.gov Open Redirect vulnerability

Vulnerable URL: http://heasarc.gsfc.nasa.gov/cgi-bin/W3Browse/startfv.pl?file=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 22.08.2016 Latest check for patch:| 22.08.2016 23:14 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

AVG WebTuneUp Cross Site Scripting

Exploit Title: AVG Subdomain XSS Vulnerability Google Dork: N/A Date: 2015/12/29 Exploit Author: RootByte Vendor Homepage: http://webtuneup.avg.com/ Software Link: N/A Version: N/A Tested on: Windows 10 / FireFox CVE : N/A Vulnerable Location:...

NASA Cross Site Scripting

Exploit Title : NASA Subdomain XSS Vulnerability Exploit Author : 4TT4CK3R Date : 2015/12/27 Tested on : Kali linux , Windows 8.1 Vendor HomePage : https://ghrc.nsstc.nasa.gov/ Google Dork : No Category : Web Application : Vulnerable Location :https://ghrc.nsstc.nasa.gov/hydro/search.pl : Using...

science.gsfc.nasa.gov XSS vulnerability

Vulnerable URL: http://science.gsfc.nasa.gov/sed/index.cfm?fuseAction=home.main=@rmcapovilla Details: Description| Value ---|--- Patched:| Yes, at 25.01.2016 Latest check for patch:| 25.01.2016 18:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

It Works! Google's Quantum Computer is '100 Million Times Faster' than a PC

Announcing the results of its experiment, Google says Quantum Computer is More than 100 Million times faster than a regular PC. Two years ago, Google and NASA National Aeronautics and Space Administration bought a D-Wave 2X quantum computer, which they have been experimenting at the U.S. space...

mynasa.nasa.gov XSS vulnerability

Vulnerable URL: http://mynasa.nasa.gov/portal/util/email/nasaemailform2007.jsp Details: Description| Value ---|--- Patched:| Yes, at 19.04.2017 Latest check for patch:| 19.04.2017 20:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

blogs.nasa.gov XSS vulnerability

Vulnerable URL: https://blogs.nasa.gov/site-search/"" == x/ Details: Description| Value ---|--- Patched:| Yes, at 25.11.2015 Latest check for patch:| 25.11.2015 16:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 6 VIP...

issmp.jsc.nasa.gov XSS vulnerability

Open Bug Bounty ID: OBB-57693 Description| Value ---|--- Affected Website:| issmp.jsc.nasa.gov Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

NASA.gov Cross Site Scripting

Exploit Title: NASA.gov main-domain DOM-XSS Date: 01/04/2015 Author: Yann CAM - Georges TAUPIN @ Synetis - ASafety Vendor or Software Link: www.nasa.gov Version: / Category: DOM-XSS Google dork: Tested on: NASA.gov main-domain NASA description :...

NASA.gov Cross Site Scripting

Exploit Title: NASA.gov sub-domains Multiple vulnerabilities Date: 27/01/2015 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.nasa.gov Version: / Category: Multiple vulnerabilities Google dork: Tested on: NASA.gov sub-domains NASA description :...

NASA Orion - Bypass, Persistent Issue & Embed Code Exec

Document Title: =============== NASA Orion - Bypass, Persistent Issue & Embed Code Exec References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1339 VU666988 US CERT Vulnerability Magazine:...

NASA Orion - Bypass, Persistent Issue & Embed Code Exec

Document Title: =============== NASA Orion - Bypass, Persistent Issue & Embed Code Exec References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1339 VU666988 US CERT Vulnerability Magazine:...

NASA Orion (Mars) Filter Bypass / Persistent Cross Site Scripting

Document Title: =============== NASA Orion - Bypass, Persistent Issue & Embed Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1339 VU666988 US CERT Vulnerability Magazine:...

CVE-2014-7113

The NASA Universe Wallpapers Xeus aka com.xeusNASA application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...