1433 matches found
66.ru Open Redirect vulnerability
Open Bug Bounty ID: OBB-65888 Description| Value ---|--- Affected Website:| 66.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable URL:...
ru-monitor.ru XSS vulnerability
Open Bug Bounty ID: OBB-65579 Description| Value ---|--- Affected Website:| ru-monitor.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...
ds39.ru XSS vulnerability
Open Bug Bounty ID: OBB-65307 Description| Value ---|--- Affected Website:| ds39.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
ds78.ru XSS vulnerability
Open Bug Bounty ID: OBB-65304 Description| Value ---|--- Affected Website:| ds78.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
ds77.ru XSS vulnerability
Open Bug Bounty ID: OBB-65303 Description| Value ---|--- Affected Website:| ds77.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
ds57.ru XSS vulnerability
Open Bug Bounty ID: OBB-65302 Description| Value ---|--- Affected Website:| ds57.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
mir33.ru XSS vulnerability
Open Bug Bounty ID: OBB-64017 Description| Value ---|--- Affected Website:| mir33.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
support24.ru XSS vulnerability
Vulnerable URL: http://support24.ru/hdesk/kb.cgi?view=test"...
e1.ru XSS vulnerability
Open Bug Bounty ID: OBB-55475 Description| Value ---|--- Affected Website:| e1.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
JetAudio 8.1.3 - '.mp4' Crash (PoC)
Exploit Title : jetAudio 8.1.3 Basic Use-after-free Corrupted mp4 Crash POC Product : jetAudio Basic Date : 12.12.2014 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link : http://www.jetaudio.com/download/ Vulnerable version : 8.1.3 Latest at the moment an...
tennisportal.ru Open Redirect vulnerability
Open Bug Bounty ID: OBB-49779 Description| Value ---|--- Affected Website:| tennisportal.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...
Voila CMS Cross Site Scripting
Exploit Title:Voila Cms Xss Vulnerability. Exploit Author:Darksnipper & Dr.v!ru$ Home:www.cybercoders.org Email:[email protected] Cms Link:http://www.voilasyria.com Tested On : windows 7 & linux. Dork:intext:powerd by voila P.o.c open http://site.com/path/view/search/viewSearch.php put in sear...
Kelihos Update Includes New TLD and USB Infection Capabilities
There’s a little Michael Myers in the Kelihos botnet; maim it, kill it and it keeps on coming back to wreak more havoc. The 2011 takedown of the Kelihos botnet was one of Microsoft’s high-profile success stories against spambots and the like, yet Kelihos was back for more at the start of 2012 usi...
Elections 2012 and DDoS attacks in Russia
Vitaly Kamluk As Eugene Kaspersky had written earlier, we were expecting new DDoS attacks on resources covering the Russian presidential election. So, as the country went to the polls on 4 March, we were on the lookout for new DDoS attacks. We were surprised to hear a news report from one mass...
One million pages infected by Lilupophilupop SQL injection
One million pages infected by Lilupophilupop SQL injection ISC Internet Storm Center reported that lilupophilupop.com SQL injection attacks. There were about 80 pages infected according to Google searches few weeks back and now it raise to over 1 million . sites being injected with string :...
Unfixed Redirect vulnerability at www.penta-91.ru
Security researcher p0pc0rn, has submitted on 24/12/2011 a Redirect vulnerability affecting www.penta-91.ru, which at the time of submission ranked 1526906 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed. If...
CVE-2011-3709
b2evolution 3.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by locales/ruRU/ru-RU.locale.php and certain other files...
CVE-2011-3709: Exposure of Sensitive Information to an Unauthorized Actor
b2evolution 3.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by locales/ruRU/ru-RU.locale.php and certain other files...
Unfixed XSS vulnerability at ibe.s7.ru
Security researcher trv, has submitted on 04/01/2011 a cross-site-scripting XSS vulnerability affecting ibe.s7.ru, which at the time of submission ranked 17935 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently unfixed...