aspenrecreation.com XSS vulnerability

Open Bug Bounty ID: OBB-672035 Description| Value ---|--- Affected Website:| aspenrecreation.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-11324

An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as remote checks for core or extension updates, could create a race condition where a session that was expected to be destroyed would be recreated...

Race condition

An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as remote checks for core or extension updates, could create a race condition where a session that was expected to be destroyed would be recreated...

PT-2016-5029 · Red Hat · Red Hat Openshift Enterprise

Name of the Vulnerable Software and Affected Versions: Red Hat OpenShift Enterprise version 3.2 Description: The issue allows remote authenticated users to read log files from another namespace. This can be achieved by creating a new namespace with the same name as a previously deleted namespace...

bransonparksandrecreation.com XSS vulnerability

Vulnerable URL: http://www.bransonparksandrecreation.com/park.php?id=1%27%22%3E%3Csvg/onload=prompt%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

bransonparksandrecreation.com XSS vulnerability

Vulnerable URL: http://www.bransonparksandrecreation.com/page.php?id=64" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1832572 Google Pagerank| 3 VIP website status:| No Check...

openSUSE Security Update : icedtea-web (openSUSE-2015-602)

The icedtea-web java plugin was updated to 1.6.1. Changes included : - Enabled Entry-Point attribute check - permissions sandbox and signed app and unsigned app with permissions all-permissions now run in sandbox instead of not at all. - fixed DownloadService - comments in deployment.properties n...

bransonparksandrecreation.com XSS vulnerability

Vulnerable URL: http://www.bransonparksandrecreation.com/page.php?id=23%27%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Grinder - System to Automate the Fuzzing of Web Browsers

Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes. Grinder Nodes provide an automated way to fuzz a browser, and generate useful crash information such as call stacks with symbol information as well as logging information which can be used...

OpenSSH < 4.5 Multiple Vulnerabilities

According to its banner, the remote host is running a version of OpenSSH prior to 4.5. Versions before 4.5 are affected by the following vulnerabilities : - A client-side NULL pointer dereference, caused by a protocol error from a malicious server, which could cause the client to crash...

[SECURITY] Fedora 11 Update: deltarpm-3.4-18.fc11

A deltarpm contains the difference between an old and a new version of a rpm, which makes it possible to recreate the new rpm from the deltarpm and the old one. You don't have to have a copy of the old rpm, deltarpms can also work with installed rpms...

CVE-2007-5913

dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication, which allows remote attackers to 1 delete auth.inc.php via the suppr parameter, and 2 re-create the auth.inc.php file with contents that specify a new account name and password for JBC Explorer via the...