SUSE-SU-2020:0087-1 Security update for libsolv, libzypp, zypper

This update for libsolv, libzypp, zypper fixes the following issues: Security issue fixed: - CVE-2019-18900: Fixed assert cookie file that was world readable bsc1158763. Bug fixes - Fixed removing orphaned packages dropped by to-be-installed products bsc1155819. - Adds libzypp API to mark all...

SUSE-SU-2020:0017-1 Security update for virglrenderer

This update for virglrenderer fixes the following issues: - CVE-2019-18388: Fixed a null pointer dereference which could have led to denial of service bsc1159479. - CVE-2019-18390: Fixed an out of bound read which could have led to denial of service bsc1159478. - CVE-2019-18389: Fixed a heap buff...

doki-doki.fr XSS vulnerability

Vulnerable URL: http://www.doki-doki.fr/recherche.html?q=%3Cscript%20src=https://openbugbounty.org/1.js%3E Details: Description| Value ---|--- Patched:| Yes, at 11.08.2017 Latest check for patch:| 11.08.2017 09:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

technology-solved.com XSS vulnerability

Vulnerable URL: http://www.technology-solved.com/locations/ Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2689979 VIP website status:| No Check...

claravital.de XSS vulnerability

Vulnerable URL: https://www.claravital.de/newsletter.php Details: Description| Value ---|--- Patched:| Yes, at 11.04.2017 Latest check for patch:| 11.04.2017 18:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 367251 VIP website status:| No Check claravital.de...

bibmaster.com XSS vulnerability

Vulnerable URL: http://www.bibmaster.com/events-detail.php?eventid=95"';-- Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1215617 VIP website status:| No...

stringforum.net XSS vulnerability

Vulnerable URL: https://www.stringforum.net/stringsearch.php?search=" Details: Description| Value ---|--- Patched:| Yes, at 08.01.2017 Latest check for patch:| 08.01.2017 23:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 720311 VIP website status:| No Check...

khabarchegenee.ir XSS vulnerability

Vulnerable URL: http://khabarchegenee.ir/fa/search.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 510983 VIP website status:| No Check khabarchegenee....

das-meininger-theater.de XSS vulnerability

Vulnerable URL: http://www.das-meininger-theater.de/index.php?m=106"=01spielplan&=1 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1529593 VIP website...

tameteo.com XSS vulnerability

Vulnerable URL: http://www.tameteo.com/s=.html Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10699 VIP website status:| Yes Check tameteo.com SSL...

leru-law.ucl.ac.uk XSS vulnerability

Vulnerable URL: http://leru-law.ucl.ac.uk/browse-results.php?institution=26=title=24%3Cscript%3Ealert%28/OPENBUGBOUNTY/%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:20 GMT Vulnerability type:| XSS Vulnerability status:|...

visualization.com XSS vulnerability

Vulnerable URL: http://www.visualization.com/?notfound=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.02.2016 Latest check for patch:| 22.02.2016 12:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

tpffa.org XSS vulnerability

Vulnerable URL: http://www.tpffa.org/?zone=/unionactive/NetworkPages/networknewswirelist.cfm=IAFFTN=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:55 GMT Vulnerability type:| XSS Vulnerability...

e-channelnews.com vulnerability

Vulnerable URL: http://e-channelnews.com/ecadmin/phpmyads/click.php?redirect=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 14.03.2016 Latest check for patch:| 14.03.2016 06:03 GMT Vulnerability status:| Publicly disclosed Alexa Rank| 2450223 Google Pagerank| 4 VI...

printing.sierracollege.edu XSS vulnerability

Vulnerable URL: http://printing.sierracollege.edu/PSP/app/web/lgn/lgndisplay.asp?action=displaypassword=PasswordForm=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:19 GMT Vulnerability type:| XS...

sharpie.com XSS vulnerability

Vulnerable URL: http://www.sharpie.com/SearchDisplay?categoryId==40051=40051=-1=SimpleSearch=2=true=Q==0=12=%22%3E%3Csvg%2Fonload%3Dalert%28%2Fxssposed%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 06.10.2015 Latest check for patch:| 06.10.2015 06:36 GMT Vulnerability type:| XSS...

ipb217-xsssql.txt

---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 ////...

Microsoft Windows contains vulnerability in Window Management API

Overview A vulnerability in the Microsoft Windows window application programming interfaces APIs could allow a local attacker to gain elevated privileges on a vulnerable system. Description Microsoft Windows contains a vulnerability in the window management application programming interface API...

Mandrake Linux Security Advisory : ispell (MDKSA-2001:058)

The ispell program uses mktemp to open temporary files. This makes it vulnerable to symlink attacks. The program now has a patch from OpenBSD applied that uses mkstemp instead, and switches gets to fgets for dealing with user input. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[Full-Disclosure] [Fwd: DansGuardian Hex Encoding URL Banned Extension Filter Bypass Vulnerability]

DansGuardian Hex Encoding URL Banned Extension Filter Bypass Vulnerability ========================================================================== Original Release Date: 2004-07-29 Author: Ruben Molina a.k.a fradiavolo Email: [email protected] !!! VIVA COLOMBIA !!! 1. Systems affected: All...