Multiple Critical Remotely Exploitable Flaws Discovered in Memcached Caching System

Hey Webmasters, are you using Memcached to boost the performance of your website? Beware! It might be vulnerable to remote hackers. Three critical Remote Code Execution vulnerabilities have been reported in Memcached by security researcher Aleksandar Nikolich at Cisco Talos Group that expose majo...

School Registration And Fee System Authentication Bypass

Exploit Title.............. School Registration and Fee System Auth Bypass Google Dork................ N/A Date....................... 01/11/2016 Exploit Author............. opt1lc Vendor Homepage............ http://www.sourcecodester.com/php/10932/school-registration-and-fee-system.html Software...

School Registration and Fee System - Authentication Bypass

School Registration and Fee System - Authentication Bypass Exploit Title.............. School Registration and Fee System Auth Bypass Google Dork................ N/A Date....................... 01/11/2016 Exploit Author............. opt1lc Vendor Homepage...

School Registration and Fee System - Authentication Bypass

Exploit Title.............. School Registration and Fee System Auth Bypass Google Dork................ N/A Date....................... 01/11/2016 Exploit Author............. opt1lc Vendor Homepage............ http://www.sourcecodester.com/php/10932/school-registration-and-fee-system.html Software...

uko.kashanu.ac.ir XSS vulnerability

Vulnerable URL: http://uko.kashanu.ac.ir/modules.php?name=teachers=viewteacher=245" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

nike.com.br XSS vulnerability

Vulnerable URL: http://www.nike.com.br/esportes/futebol?utmsource=xx';alertOPENBUGBOUNTY// Details: Description| Value ---|--- Patched:| Yes, at 08.11.2017 Latest check for patch:| 08.11.2017 07:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24413 VIP websit...

librariesaustralia.nla.gov.au XSS vulnerability

Vulnerable URL: https://librariesaustralia.nla.gov.au/admin Details: Description| Value ---|--- Patched:| Yes, at 10.02.2017 Latest check for patch:| 10.02.2017 03:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

europarl.europa.eu Open Redirect vulnerability

Vulnerable URL: http://www.europarl.europa.eu/croatiancommissionerhearing/jsp/jahia/templates/cms/croatemplates/redirect.jsp?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:56 GMT Vulnerability type:| Open...

Symantec Web Gateway Management Console Interface Command Injection

SUMMARY Symantec has released an update to address a Symantec Web Gateway SWG Management Console Interface command injection issue bypassing validation restrictions to add an unauthorized whitelist entry. AFFECTED PRODUCTS Symantec Web Gateway SWG --- CVE | Affected Versions | Remediation...

moulin-maurice.com XSS vulnerability

Vulnerable URL: http://www.moulin-maurice.com/boutique/achat/recherche.php?motclef=HelloWorld" onfocus="alert'OPENBUGBOUNTY'" autofocus=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

USN-3087-2 OpenSSL Regression | Cloud Foundry

USN-3087-2 OpenSSL Regression High Vendor Canonical Ubuntu, OpenSSL Versions Affected Canonical Ubuntu 14.04 LTS, OpenSSLv1 Description USN-3087-1 fixed vulnerabilities in OpenSSL. The fix for CVE-2016-2182 was incomplete and caused a regression when parsing certificates. This update fixes the...

gl-events-webtoprint.com XSS vulnerability

Vulnerable URL: http://www.gl-events-webtoprint.com/recherche/?q=%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23837850 V...

bilbaoturismo.net XSS vulnerability

Vulnerable URL: http://www.bilbaoturismo.net/BilbaoTurismo/fr/rechercher?criterioBusqueda=%27%22%3E%3Cscript+src%3Dhttps%3A%2F%2Fopenbugbounty.org%2F1.js%3E= Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:24 GMT Vulnerability type:| XSS...

asus.com XSS vulnerability

Vulnerable URL: http://www.asus.com/zentalk/tw/forum.php?mod=viewthread=82557dd2ks';alert'OPENBUGBOUNTY';//=page%3D1 Details: Description| Value ---|--- Patched:| Yes, at 24.03.2017 Latest check for patch:| 24.03.2017 04:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Mozilla Patching Firefox Certificate Pinning Vulnerability

Mozilla is expected tomorrow to patch a critical vulnerability in Firefox’s automated update process for extensions that should put the wraps on a confusing set of twists surrounding this bug. The flaw also affected the Tor Browser and was patched Friday by the Tor Project. The vulnerability firs...

lppl.univ-nantes.fr XSS vulnerability

Vulnerable URL: http://www.lppl.univ-nantes.fr/servlet/com.jsbsoft.jtf.core.SG?PROC=IDENTIFICATION=ST- Details: Description| Value ---|--- Patched:| Yes, at 14.09.2016 Latest check for patch:| 14.09.2016 20:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Microsoft Fixes 47 Vulnerabilities with September Patch Tuesday

Microsoft patched 47 vulnerabilities as part of 14 security bulletins, seven critical, with its monthly Patch Tuesday updates today. The company is warning users that if left unpatched, 10 of the issues can lead to remote execution. The updates resolve issues in Microsoft Windows, Office, Office...

New Windows Patch Policy At Odds With Acceptable Risk

With Microsoft’s Patch Tuesday release tomorrow, the countdown begins for application developers to button down code ahead of Microsoft’s new servicing model starting in October that could present vulnerability issues for some businesses. “Tomorrow it’s going to be business as usual, but it will...

alternatives-internationales.fr XSS vulnerability

Vulnerable URL: http://www.alternatives-internationales.fr/newsletterfr08.html Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2453899 VIP website status:|...

cloughpikevet.vetstreet.com XSS vulnerability

Vulnerable URL: http://cloughpikevet.vetstreet.com/blog.html?p=10?submit=xss%3Cimg%20src=x%20onerror=confirm%22OPENBUGBOUNTY%22%3E=xss%3Cimg%20src=x%20onerror=confirm%22OPENBUGBOUNTY%22%3E& Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| X...