myhomehunter.ca XSS vulnerability

Vulnerable URL: http://www.myhomehunter.ca/listingresults.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check myhomehunter.ca...

Microsoft IIS WebDav ScStoragePathFromUrl Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule ' Microsoft IIS WebDav ScStoragePathFromUrl Overflow', 'Description' = %q Buffer overflow in the ScStoragePathFromUrl function in the WebDAV servic...

bachmann-pflanzentrays.ch XSS vulnerability

Vulnerable URL:...

kb.act.com XSS vulnerability

Vulnerable URL: http://kb.act.com/ci/fattach/get/33949/1494124269/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check kb.act.com SSL...

olddealer.mustek.co.za XSS vulnerability

Vulnerable URL: http://olddealer.mustek.co.za/new-password.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

maerkte.nordbayern.de XSS vulnerability

Vulnerable URL: http://maerkte.nordbayern.de/adpres/srch.do?opCode=doSrch=suchmarktgesundTrefferanzahlSt=10=0=0=1=0=nz=default=1493888493324=%3E%27%3E%22%3Es%3Ci%3Ei%3Cimg+src%3Dx+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3EFreitext=rFreitextAND=r=PLZLbDispl=PLZLb==radius= Details: Description|...

khaosokaccommodation.com XSS vulnerability

Vulnerable URL: https://www.khaosokaccommodation.com/wp-content/plugins/mgl-instagram-gallery/single-gallery.php?media=eCIgLz48c2NyaXB0PmFsZXJ0KCdPUEVOQlVHQk9VTlRZJyk8L3NjcmlwdD4= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:19 GMT...

vurv.cz XSS vulnerability

Vulnerable URL: https://www.vurv.cz/index.php?searchtext=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=search=instituceen Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

platinumtravel.ie XSS vulnerability

Vulnerable URL: http://www.platinumtravel.ie/bookitnow.ie/EscortedToursEuropeTours.php?Britain%20&%20Ireland%20ExplorerEscortedTour?id=262"'--!cat=11= Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:41 GMT Vulnerability type:| XSS...

emilystar.com XSS vulnerability

Vulnerable URL: http://www.emilystar.com/t1/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3EMTcxOS4yNS4yNy4xMTQuMS4wLjAuMC4w Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

A Storm’s a Coming: How businesses can defend against threat actor groups like Pawn Storm

Pawn Storm aka Sednit5, Fancy Bear, APT28, Sofacy and STRONTIUM8 might sound like Instagram accounts, top-secret spy programs or recently passed legislation, but in reality they are all different names for the same successful cyber espionage group or threat actor group. These actors often use...

WordPress Plugin Nelio AB Testing Server-Side Request Forgery (SSRF)

Case Study: SSRF in Nelio AB Testing WordPress Plugin Nelio AB Testing is a WordPress plugin used for A/B Testing in WordPress pages. We can download the source-code of the Plugin from plugins.svn.wordpress.org/nelio-ab-testing/tags/4.5.8/. Server-side Request Forgery SSRF is a vulnerability wher...

joubertrealty.com XSS vulnerability

Vulnerable URL: http://www.joubertrealty.com/website/property-search?option=comezrealty=properties=results=66=0"--!"=0=0=0=0squarefeetsquarefeet=0=0&custom4;&custom5;&custom6;&custom7;&custom8;=1=6=0=0=DEFAULT=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

Why you can’t update it all at once?

It’s the second part of our talk with Daniil Svetlov at his radio show “Safe Environment” recorded 29.03.2017. In this part we talk about vulnerabilities in Linux and proprietary software, problems of patch an vulnerability management, and mention some related compliance requirements. Video with...

Understanding Your Monthly Security Reports

When we first starting a conversation with our prospects, we are frequently asked, “Just how will I know that Wallarm is working?” To help answer that, let’s take a look at the report we sent to one of our customers last week to understand what kind of threats Wallarm defends agains. Wallarm...

OpenSSL Vulnerability

The OpenSSL library has been found to contain vulnerability CVE-2017-3731. Palo Alto Networks software makes use of the vulnerable library and may be affected. Ref PAN-73914 / CVE-2017-3731 The OpenSSL library in use by PAN-OS is patched on a regular basis. This issue affects PAN-OS 6.1, PAN-OS...

Hacking Ali cloud released Windows System the high-risk vulnerability solution-exploits warning-the black bar safety net

4 on 14 November, outside the hacking group discloses a comprising a plurality of Windows Remote exploit tools for the confidential documents. To ensure that the cloud on the user's business security, Ali cloud in 4 month 15 days morning nine points half released a vulnerability announcement and...

ashemaletube.com XSS vulnerability

Vulnerable URL: https://www.ashemaletube.com/search/test"'--! Details: Description| Value ---|--- Patched:| Yes, at 12.04.2017 Latest check for patch:| 12.04.2017 18:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1634 VIP website status:| Yes Check...

actionboardshop.com XSS vulnerability

Vulnerable URL: http://www.actionboardshop.com/catalogsearch/result/?q=%22%3E%3Csvg%2Fonload%3Dalert%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4012064 VI...

EON 5.0 Remote Code Execution Vulnerability

Exploit for php platform in category web applications CVE-2017-6087 EON 5.0 Remote Code Execution Description EyesOfNetwork "EON" is an OpenSource network monitoring solution. Remote Code Execution authenticated The Eonweb code does not correctly filter arguments, allowing authenticated users to...