alef.ir Open Redirect vulnerability

Vulnerable URL: http://alef.ir/redirect.html?u=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:50 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 5368 VIP website status:|...

Critical MySQL Vulnerabilities Can Lead to Server Compromise

Critical vulnerabilities in MySQL and vendor deployments by database servers MariaDB and PerconaDB have been identified that can lead to arbitrary code execution, root privilege escalation and server compromise. Dawid Golunski of Legal Hackers published details around two proof-of-concept exploit...

FreeBSD-SA-16:34.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:34.bind Security Advisory The FreeBSD Project Topic: BIND Remote Denial of Service vulnerability Category: contrib Module: bind Announced: 2016-11-02 Credits...

Multiple Critical Remotely Exploitable Flaws Discovered in Memcached Caching System

Hey Webmasters, are you using Memcached to boost the performance of your website? Beware! It might be vulnerable to remote hackers. Three critical Remote Code Execution vulnerabilities have been reported in Memcached by security researcher Aleksandar Nikolich at Cisco Talos Group that expose majo...

School Registration and Fee System - Authentication Bypass

Exploit Title.............. School Registration and Fee System Auth Bypass Google Dork................ N/A Date....................... 01/11/2016 Exploit Author............. opt1lc Vendor Homepage............ http://www.sourcecodester.com/php/10932/school-registration-and-fee-system.html Software...

School Registration and Fee System - Authentication Bypass

School Registration and Fee System - Authentication Bypass Exploit Title.............. School Registration and Fee System Auth Bypass Google Dork................ N/A Date....................... 01/11/2016 Exploit Author............. opt1lc Vendor Homepage...

School Registration And Fee System Authentication Bypass

Exploit Title.............. School Registration and Fee System Auth Bypass Google Dork................ N/A Date....................... 01/11/2016 Exploit Author............. opt1lc Vendor Homepage............ http://www.sourcecodester.com/php/10932/school-registration-and-fee-system.html Software...

uko.kashanu.ac.ir XSS vulnerability

Vulnerable URL: http://uko.kashanu.ac.ir/modules.php?name=teachers=viewteacher=245" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

nike.com.br XSS vulnerability

Vulnerable URL: http://www.nike.com.br/esportes/futebol?utmsource=xx';alertOPENBUGBOUNTY// Details: Description| Value ---|--- Patched:| Yes, at 08.11.2017 Latest check for patch:| 08.11.2017 07:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24413 VIP websit...

librariesaustralia.nla.gov.au XSS vulnerability

Vulnerable URL: https://librariesaustralia.nla.gov.au/admin Details: Description| Value ---|--- Patched:| Yes, at 10.02.2017 Latest check for patch:| 10.02.2017 03:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

europarl.europa.eu Open Redirect vulnerability

Vulnerable URL: http://www.europarl.europa.eu/croatiancommissionerhearing/jsp/jahia/templates/cms/croatemplates/redirect.jsp?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:56 GMT Vulnerability type:| Open...

Symantec Web Gateway Management Console Interface Command Injection

SUMMARY Symantec has released an update to address a Symantec Web Gateway SWG Management Console Interface command injection issue bypassing validation restrictions to add an unauthorized whitelist entry. AFFECTED PRODUCTS Symantec Web Gateway SWG --- CVE | Affected Versions | Remediation...

moulin-maurice.com XSS vulnerability

Vulnerable URL: http://www.moulin-maurice.com/boutique/achat/recherche.php?motclef=HelloWorld" onfocus="alert'OPENBUGBOUNTY'" autofocus=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

USN-3087-2 OpenSSL Regression | Cloud Foundry

USN-3087-2 OpenSSL Regression High Vendor Canonical Ubuntu, OpenSSL Versions Affected Canonical Ubuntu 14.04 LTS, OpenSSLv1 Description USN-3087-1 fixed vulnerabilities in OpenSSL. The fix for CVE-2016-2182 was incomplete and caused a regression when parsing certificates. This update fixes the...

gl-events-webtoprint.com XSS vulnerability

Vulnerable URL: http://www.gl-events-webtoprint.com/recherche/?q=%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23837850 V...

bilbaoturismo.net XSS vulnerability

Vulnerable URL: http://www.bilbaoturismo.net/BilbaoTurismo/fr/rechercher?criterioBusqueda=%27%22%3E%3Cscript+src%3Dhttps%3A%2F%2Fopenbugbounty.org%2F1.js%3E= Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:24 GMT Vulnerability type:| XSS...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/zentalk/tw/forum.php?mod=viewthread=82557dd2ks';alert'OPENBUGBOUNTY';//=page%3D1 Details: Description| Value ---|--- Patched:| Yes, at 24.03.2017 Latest check for patch:| 24.03.2017 04:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Mozilla Patching Firefox Certificate Pinning Vulnerability

Mozilla is expected tomorrow to patch a critical vulnerability in Firefox’s automated update process for extensions that should put the wraps on a confusing set of twists surrounding this bug. The flaw also affected the Tor Browser and was patched Friday by the Tor Project. The vulnerability firs...

lppl.univ-nantes.fr XSS vulnerability

Vulnerable URL: http://www.lppl.univ-nantes.fr/servlet/com.jsbsoft.jtf.core.SG?PROC=IDENTIFICATION=ST- Details: Description| Value ---|--- Patched:| Yes, at 14.09.2016 Latest check for patch:| 14.09.2016 20:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Microsoft Fixes 47 Vulnerabilities with September Patch Tuesday

Microsoft patched 47 vulnerabilities as part of 14 security bulletins, seven critical, with its monthly Patch Tuesday updates today. The company is warning users that if left unpatched, 10 of the issues can lead to remote execution. The updates resolve issues in Microsoft Windows, Office, Office...