kawerak.org XSS vulnerability

Vulnerable URL: http://www.kawerak.org/cgi-bin/Calcium310.pl/Calendar/Calcium310.pl?CalendarName=%22%3E%3Cimg/src=%22%3E%22onerror=confirm%27XSSPOSED%27%3E=ShowIt=Month=Absolute=Block=9=8=Count=2016/12/1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

e-mielec24.pl XSS vulnerability

Vulnerable URL: http://www.e-mielec24.pl/wp-content/themes/themerush/inc/plugins/shortcode/shortcodepopup.php?get=' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6496794 VIP websi...

eksplozjasmaku.blox.pl XSS vulnerability

Vulnerable URL: http://eksplozjasmaku.blox.pl/html?page=blogPublicSearch= blogPublicSearch' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

dunja.blox.pl XSS vulnerability

Vulnerable URL: http://dunja.blox.pl/html?page=blogPublicSearch= blogPublicSearch' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

prus24.pl XSS vulnerability

Vulnerable URL: http://prus24.pl/bookstore,search?phrase=&search-condition;= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2099309 VIP website status:| No Check prus24.pl SSL...

oglaszamy24.pl XSS vulnerability

Vulnerable URL: http://www.oglaszamy24.pl/ogloszenia.php?std=1=%3C/title%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E=7 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21265 VIP website...

Allround Automations PL/SQL Developer < 11.0.6.1776 HTTP Insecure Update RCE

The version of Allround Automations PL/SQL Developer installed on the remote host is prior to 11.0.6.1776. It is, therefore, affected by a remote code execution vulnerability due to a failure to properly verify the origin or authenticity of update data sent via HTTP. A man-in-the-middle attacker...

Allround Automations PL/SQL Developer Installed

Binary data allautoplsqldeveloper.nbin...

Allround Automations PL/SQL Developer Arbitrary Code Execution Vulnerability

Allround Automations PL/SQL Developer is an integrated development environment for developing stored procedures for Oracle Databases. An arbitrary code execution vulnerability exists in Allround Automations PL/SQL Developer, which can be exploited by an attacker to execute arbitrary code...

CVE-2016-2346

Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream...

CVE-2016-2346

Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream...

Design/Logic Flaw

Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream...

CVE-2016-2346

CVE-2016-2346 affects Allround Automations PL/SQL Developer prior to 11.0.6.1776. The vulnerability arises from verifying HTTP update data, allowing a man-in-the-middle to modify the client‑server data stream and execute arbitrary code with the user’s privileges. Affected version: PL/SQL Develope...

CVE-2016-2346

Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream...

Allround Automations PL/SQL Developer v11 performs updates over HTTP

Overview Allround Automations PL/SQL Developer version 11 checks for updates over HTTP and does not verify updates before executing commands, which may allow an attacker to execute arbitrary code. Description CWE-345: Insufficient Verification of Data Authenticity - CVE-2016-2346 According to the...

Szczęśliwe Koło PL - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Szczęśliwe Koło PL published at the 'play' market has multiple vulnerabilities...

The vulnerabilities of Debian GNU/Linux and Ubuntu operating systems, along with the PostgreSQL database management system, allow attackers to enhance their privileges.

The vulnerability in the configuration of Debian GNU/Linux and Ubuntu operating systems, as well as PostgreSQL database management systems, is related to errors in restricting access to the GUCS component for PL/Java. Exploiting this vulnerability allows a malicious actor to increase their...

PostgreSQL Multiple Vulnerabilities (Mar 2015) - Linux

PostgreSQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...

SUSE SLED11 / SLES11 Security Update : postgresql94 (SUSE-SU-2016:0677-1)

This update for postgresql94 fixes the following issues : - Security and bugfix release 9.4.6 : - IMPORTANT Users of version 9.4 will need to reindex any jsonbpathops indexes they have created, in order to fix a persistent issue with missing index entries. - Fix infinite loops and buffer-overrun...

SUSE-SU-2016:0677-1 Security update for postgresql94

This update for postgresql94 fixes the following issues: - Security and bugfix release 9.4.6: IMPORTANT Users of version 9.4 will need to reindex any jsonbpathops indexes they have created, in order to fix a persistent issue with missing index entries. Fix infinite loops and buffer-overrun proble...