1930 matches found
hockeyfrance.com XSS vulnerability
Vulnerable URL: http://www.hockeyfrance.com/championnats/division-3/saison-reguliere/calendrier-resultats-division-3?linkpyxis=%2Fpage.php%3Fidrubrique%3D0%26file%3Doverview%26CompID%3D686%22-alertOPENBUGBOUNTY-%22=Play%20Offs%20D3== Details: Description| Value ---|--- Patched:| Verification in...
Introducing the Qualys New Look and Positioning
Dear Customer, Partner and Security Professional, I would like to thank all of you for your support during our ongoing journey to a world where we are making security invisible and an integrated component of the Digital Transformation of our enterprises. With your help and the dedication of our...
CVE-2017-11349
dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data...
Free Personal Self Hosted Dynamic DNS
Free Personal Self Hosted Dynamic DNS with BIND and DNSSEC Environment: Server: static IP, running BIND Home: dynamic IP, running Debian/buntu Key Generation First step is to generate a key on the server. /etc/bind $ sudo dnssec-keygen -a HMAC-MD5 -b 512 -n HOST home.dynamic.n0where.net This...
lompocathletics.olinesports.com XSS vulnerability
Vulnerable URL: http://lompocathletics.olinesports.com/schedule.php?sport=1"...
m.dart.org XSS vulnerability
Open Bug Bounty ID: OBB-260039 Description| Value ---|--- Affected Website:| m.dart.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
lhscubs.olinesports.com XSS vulnerability
Vulnerable URL: http://lhscubs.olinesports.com/schedule.php?sport=1"...
ourladyofthelakehalifax.org XSS vulnerability
Open Bug Bounty ID: OBB-258427 Description| Value ---|--- Affected Website:| ourladyofthelakehalifax.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
anguillaairservices.com XSS vulnerability
Vulnerable URL: http://www.anguillaairservices.com/schedule/index.php?airport1=1&airport2;=1"...
trainview.septa.org XSS vulnerability
Vulnerable URL: http://trainview.septa.org/trainschedule.php?trainnum=1"...
mga.edu XSS vulnerability
Vulnerable URL: http://www.mga.edu/course-schedule/index.php?quick=SUB=subj=1"...
justsaysoccer.com XSS vulnerability
Vulnerable URL: https://www.justsaysoccer.com/html/season/shared/schedules.asp?Prefix=spring=SPRING+2017=Boys=2010:U7=Brown===DTF=1/-///'/"//--...
How to Manage Scheduled Snapshots?
This article describes the method to manage snapshot schedules...
Security and Human Behavior (SHB 2017)
I'm in Cambridge University, at the tenth Workshop on Security and Human Behavior. SHB is a small invitational gathering of people studying various aspects of the human side of security, organized each year by Ross Anderson, Alessandro Acquisti, and myself. The 50 or so people in the room include...
awpwriter.org XSS vulnerability
Vulnerable URL: https://www.awpwriter.org/awpconference/scheduleauthorsignings?orderby=ecsa.lastname%2Cecsa.firstnamemethod=ASCname=xss%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3Ename=flyway=alltime=time= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.08.2017...
Google I/O 2017 application for Android has an unspecified vulnerability
Google I/O 2017 application for Android is a conference management application for Google's annual I/O conference based on the Android platform developed by Google USA. A security vulnerability exists in versions of the Google I/O 2017 application for Android-based platforms prior to 5.1.4, due t...
CVE-2016-7840
Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter...
Cross site scripting
Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter...
CVE-2016-7840
CVE-2016-7840 is a Cross-site Scripting (XSS) vulnerability in WEB SCHEDULE (Olive Design). The issue arises from a flaw in processing the month parameter, allowing remote actors to inject arbitrary web script or HTML. Documented references (JVN entries) describe CWE-79 and indicate impact on the...
