fcbarcelona.es XSS vulnerability

Vulnerable URL: https://www.fcbarcelona.es/buscador?keywords=%3C/title%3E%3C/script/%22-alert0-%22--%3E%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=i:aps,k:%3C/title%3E%3C/script/%22-alert0-%22-%20-%3E%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, ...

xe003900.vls014vm05.hostmaster.sk XSS vulnerability

Vulnerable URL: http://xe003900.vls014vm05.hostmaster.sk/examuniversity.php?cat=English"= Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

lib.vippo.org.ua XSS vulnerability

Vulnerable URL: http://lib.vippo.org.ua/periodyka.php?cat=72" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...

ColoradoFTP 1.3 Prime Edition (Build 8) Directory Traversal

Advisory Information Title: Directory Traversal Vulnerability in ColoradoFTP v1.3 Prime Edition Build 8 Date published: n/a Date of last update: n/a Vendors contacted: ColoradoFTP author Sergei Abramov Discovered by: Rv3Laboratory Research Team Severity: High 02. Vulnerability Information...

shoppingpenha.com.br XSS vulnerability

Vulnerable URL: http://www.shoppingpenha.com.br/?s=%27;alert/XSSPOSED///%27;alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017...

Zabbix Agent 3.0.1 mysql. size shell command injection

CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection Affected products ================= At least Zabbix Agent 1:3.0.1-1+wheezy from http://repo.zabbix.com/zabbix/3.0/debian is vulnerable. Other versions were not tested. Background ========== "Zabbix agent is deployed on a...

wersalik.pl XSS vulnerability

Vulnerable URL: http://www.wersalik.pl/szukaj.php?a=szukaj==1grid=3keyword= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 552862 VIP website status:| No Check wersalik.pl SSL...

Joshua Drake on Android Security Post-Stagefright

Joshua Drake of Zimperium Labs talks to Mike Mimoso about the last year post-Stagefright, the effectiveness of Google’s monthly patching cycle, and some of the security enhancements forthcoming in Android N. Download: JoshuaDrakeonPost-StagefrightAndroid.mp3 Music by Chris Gonsalves...

Export-Grade Crypto Patching Improves

LAS VEGAS – The FREAK, LOGJAM and DROWN attacks of the last 17 months weren’t just the work of academics and security researchers who found a cool way to unmask encrypted traffic. They were ugly reminders of the Crypto Wars of the 1990s and why export-grade cryptography and intentional encryption...

cefor.be XSS vulnerability

Vulnerable URL: http://www.cefor.be/DBEnora/Enora/Partenaire/1identification.php?Q=' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2083146 VIP website status:| No Check cefor.be S...

careers.weather.com XSS vulnerability

Vulnerable URL: https://careers.weather.com/w/talentcommunity/subscribe/?slp=/talentcommunity/profile/%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 11:04 GMT Vulnerability type:| XSS Vulnerability...

musicdownloadfree.xyz XSS vulnerability

Vulnerable URL: http://musicdownloadfree.xyz/search.php?id=%22%3E%3C%2Ftitle%3E%27%3E%3B%3C%2Fscript%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:48 GMT Vulnerability type:| XSS...

mobilbekas.co.id XSS vulnerability

Vulnerable URL: http://www.mobilbekas.co.id/sitesearch.php?smake=12model="scondition=0yearfrom=0yearto=0pricefrom=0priceto=140000000mileagefrom=0mileageto=location=0sortby=idorder=descrow=10 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:45...

Beware! Your iPhone Can Be Hacked Remotely With Just A Message

In Brief Do you own an iPhone? Mac? Or any Apple device? Just one specially-crafted message can expose your personal information, including your authentication credentials stored in your device's memory, to a hacker. The vulnerability is quite similar to the Stagefright vulnerabilities, discovere...

epson.nl XSS vulnerability

Vulnerable URL: https://www.epson.nl/search/products?search=" Details: Description| Value ---|--- Patched:| Yes, at 08.07.2017 Latest check for patch:| 08.07.2017 13:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 479516 VIP website status:| No Check epson.nl...

nehosoc.nl XSS vulnerability

Vulnerable URL: http://www.nehosoc.nl/zoeken.php?s=monsters=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check nehosoc.nl SSL...

thepavement.org.uk XSS vulnerability

Vulnerable URL: http://www.thepavement.org.uk/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7655694 VIP website status:| No Check thepavement.org.uk SSL connection:|...

cnlegalsearch.com XSS vulnerability

Vulnerable URL: http://www.cnlegalsearch.com/search/addtocart.php?id=1425%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:38 GMT Vulnerability type:| XSS Vulnerability status:|...

skinrxclinic.com XSS vulnerability

Vulnerable URL: http://skinrxclinic.com/searchresults.php?search=Search=1terms=http://www.michaelrose.com/searchresults.php?searchterm=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

0day vulnerabilities: hackers from the BMW portal tampering with car information-bug warning-the black bar safety net

http://www.zdnet.com/Article/hackers-can-tamper-with-car-registration-through-bmw-connected-car-portal/ ! ConnectedDrive portal and BMW of the domain is very vulnerable,the hacker can not patch the vulnerability to attack. Researchers have recently disclosed the impact of the BMW the BMW website...