app.rainbird.com.cn XSS vulnerability

Vulnerable URL:...

python-django, python2-django: information leakage

If an application allows users to specify an unvalidated format for dates and passes this format to the date filter, e.g. lastupdated|date:userdateformat , then a malicious user could obtain any secret in the application's settings by specifying a settings key instead of a date format. e.g...

sps.edu XSS vulnerability

Vulnerable URL: https://www.sps.edu/podium/default.aspx?t=52562=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

Ubiquiti Inc.: account.ubnt.com CSRF

Good Evening Sir, I want to inform you that i have successfully discovered a problem on the API django Restfull API you used to manage the security of https://account.ubnt.com The vulnerability type : CSRF Vulnerability description : An attacker create a web page with the code attached to this...

sg.se XSS vulnerability

Vulnerable URL: http://www.sg.se/en/"' Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 4 VIP website status:| No...

it.lovepedia.net XSS vulnerability

Vulnerable URL: http://it.lovepedia.net/login.php Details: Description| Value ---|--- Patched:| Yes, at 16.12.2015 Latest check for patch:| 16.12.2015 01:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 4 VIP website...

guests.met-art.com XSS vulnerability

Vulnerable URL: http://guests.met-art.com/search/%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

mafengwo.cn XSS vulnerability

Vulnerable URL: http://www.mafengwo.cn/group/s.php?q="'--; Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2102 Google Pagerank| 7 VIP website status:| Yes...

fc-portois.fr XSS vulnerability

Vulnerable URL: http://www.fc-portois.fr//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8460326 Google Pagerank| 1 VIP website status:| N...

turkey.adhoards.com XSS vulnerability

Vulnerable URL: http://turkey.adhoards.com/all/search/?filterbyprice=order=1bycategory=bykeywords=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2015 Latest check for patch:| 23.11.2015 20:29 GMT Vulnerability type:| XSS...

ecurieauto-chateaugaillard.com XSS vulnerability

Vulnerable URL: http://www.ecurieauto-chateaugaillard.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

Serendipity 2.0.2 Cross Site Scripting

Date: 28/10/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Stored XSS Tested on: Windows 8.1 Product: Serendipity Version: 2.0.2 Description: Application is vulnerable to Stored XSS attack. There is a XSS issue in version 2.0.2. and the vulnerable parameters are "Blog name" and...

Kubernetes: Missing name validation allows path traversal in etcd

Kubernetes fails to validate object name types before passing the data to etcd. As the etcd service generates keys based on the object name type this can lead to a directory path traversal...

ruedelafete.com XSS vulnerability

Vulnerable URL: http://www.ruedelafete.com/recherche.html?motclef=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=1id=&valider.x;=35&valider.y;=16 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

kabika.de XSS vulnerability

Vulnerable URL: http://www.kabika.de/advancedsearchresult.php?keywords=asdalert"XSSPOSED"...

GetSimple CMS 3.3.7 Cross Site Scripting

Date: 12/10/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Reflected XSS Tested on: Windows 8.1 Product: GetSimple CMS Version: 3.3.7 Description: Application is vulnerable to Reflected XSS attack. There is a reflected XSS issue in the "uploads" section in version 3.3.7. When we...

barilla.com.br XSS vulnerability

Vulnerable URL: http://www.barilla.com.br/receitasecardapios/procurarreceitas/searchricette.jsp?ingrediente=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=ingrediente+ingredientebarilla=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=Barilla-ricette-br=5=5 Details: Description| Val...

CVE-2015-3847

Bluetooth in Android before 5.1.1 LMY48T allows attackers to remove stored SMS messages via a crafted application, aka internal bug 22343270...

Cross-Site Scripting in subscribetocalendar.action

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-48910. panel The contents of the 'subCalendarId' parameter is not validated in POST requests to 'subscribetocalendar.action' and...

CVE-2015-3860

CVE-2015-3860 is a Lockscreen elevation-of-privilege flaw in Android 5.0/5.1 (build LMY48M) where the passwordEntry field in Keyguard does not cap input length, enabling a physical attacker to crash SystemUI and bypass the lock screen. Affected versions include Android 5.0 and 5.1 up to 5.1.0; Go...