s-bahn-berlin.de XSS vulnerability

Vulnerable URL: http://www.s-bahn-berlin.de/suche/index.php?hl=de=000072617236458643545:gznpuupyvaa=qwer"' -Archiv=FORID:9=qwer";%0aalert'XSSPOSED';%0avar x="=de Details: Description| Value ---|--- Patched:| Yes, at 01.08.2015 Latest check for patch:| 01.08.2015 20:03 GMT Vulnerability type:| XSS...

CVE-2015-2974

LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file...

CVE-2015-2974

Gazou BBS plus (LEMON-S PHP) prior to version 2.36 is affected by a vulnerability in file upload processing that allows remote attackers to upload arbitrary HTML documents via specially crafted image files. Exploitation details are consistent across multiple sources (CNVD/NVD/JVN). The impact is ...

JVN#86680970: Gazou BBS plus vulnerability in file upload processing

Gazou BBS plus provided by LEMON-S PHP contains a vulnerability in the processing of file uploads. Impact An image file may be specially crafted to upload arbitrary HTML files. Solution Apply an Update Apply the update according to the information provided by the provider. Products Affected Gazou...

RedHat Update for autofs RHSA-2015:1344-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

s-dom.su XSS vulnerability

Vulnerable URL: http://s-dom.su/sitesearch?a=0term=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 11.08.2015 Latest check for patch:| 11.08.2015 23:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Hack or will be in 8 months to disclose the Tesla Model S The digital security vulnerabilities-vulnerability warning-the black bar safety net

Right now, the Tesla car is perhaps the world networking of the highest consumer vehicles, has become a hackers a target. Thomas Fox-Brewster at Forbes Chinese network wrote the article said, in 8 months, held at the Defcon hacker conference, CloudFlare company Research Director Marc Rogers Marc...

Hacking exposed Tesla Model S the memory 5 of the digital vulnerability-vulnerability warning-the black bar safety net

According to Forbes reports, next month's Defcon hacker conference the eve of the opening, Tesla Model S models are exposed there are still 5 at the digital security vulnerabilities, and these vulnerabilities are still not being blocked. As global probably the most popular consumer interest in th...

LEMON-S PHP Simple Oekaki BBS Cross-Site Scripting Vulnerability

LEMON-S PHP Simple Oekaki BBS is a PHP-based electronic bulletin board BBS script. A cross-site scripting vulnerability exists in the index.php script in LEMON-S PHP Simple Oekaki BBS versions prior to 1.21. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

MS15-070: Vulnerability in Microsoft Office Could Allow Remote Code Execution (3072620)

The remote Mac OS X host has a version of Microsoft Excel installed that is affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincing a user to open a specially crafted file, resultin...

LEMON-S PHP Simple Oekaki BBS Arbitrary File Deletion Vulnerability

LEMON-S PHP Simple Oekaki BBS is a PHP-based electronic bulletin board BBS script. A security vulnerability exists in the index.php script of LEMON-S PHP Simple Oekaki BBS versions prior to 1.21. A remote attacker can exploit the vulnerability to delete arbitrary files with the help of the...

s-b-z.com XSS vulnerability

Vulnerable URL: http://www.s-b-z.com/message4.php?url=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4402648 Google Pagerank| 1 VIP website status:| No Check s-b-z.com SSL...

CVE-2015-2969

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...

CVE-2015-2970

index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete arbitrary files via the oekakis parameter...

CVE-2015-2969

CVE-2015-2969 corresponds to a persistent XSS in LEMON-S PHP Simple Oekaki BBS before version 1.21. The vulnerability is triggered in index.php through the oekakis parameter, allowing remote attackers to inject arbitrary scripts/HTML. Affected software: Simple Oekaki BBS ≤ v1.20 (prior to 1.21). ...

CVE-2015-2970

The vulnerability CVE-2015-2970 affects the LEMON-S PHP Simple Oekaki BBS, specifically versions prior to 1.21. A flaw in index.php allows remote attackers to delete arbitrary files by manipulating the oekakis parameter, due to improper parsing. This is a server-side file deletion issue that coul...

CVE-2015-2969

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...

JVN#61935381: Simple Oekaki BBS vulnerability where arbitary files may be deleted

Simple Oekaki BBS provided by LEMON-S PHP contains a flaw in parsing the oekakis parameter in index.php, which may allow a remote attacker to delete arbitrary files. Impact A remote attacker may delete arbitrary files on the server. Solution Update the Software Update to the latest version...

Fedora Update for mingw-qt5-qtquick1 FEDORA-2015-4518

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco uBR10000 IOS Denial of Service Vulnerability

Cisco IOS on uBR10000 devices is a set of operating systems from Cisco that run in uBR10000 series routers. A denial of service vulnerability exists in the IPv6 to IPv4 subsystem of Cisco IOS version 15.3S on Cisco uBR10000 devices, which allows remote attackers to cause a denial of service via a...