moteko.net XSS vulnerability

Vulnerable URL: http://www.moteko.net/portal/download.php?report=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

kramerspain.com XSS vulnerability

Vulnerable URL: http://www.kramerspain.com/products/?s=%22%3E%3Csvg/onload=confirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24606...

lianjye.com.tw XSS vulnerability

Vulnerable URL: http://www.lianjye.com.tw/Error.asp?Msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

getdpi.com vulnerability

Vulnerable URL: http://www.getdpi.com/forum/redirect-to/?redirect=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 285011 Google Pagerank| 3 VIP website status:| No Check getdpi.com...

tvprogramm.berliner-zeitung.de XSS vulnerability

Vulnerable URL: http://tvprogramm.berliner-zeitung.de/search/?type=tvShow="'--; Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

berlin-reseguide.se XSS vulnerability

Vulnerable URL: http://berlin-reseguide.se/tipsberlin.php/"';-- Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1...

ninakikicreation.e-monsite.com XSS vulnerability

Vulnerable URL: http://ninakikicreation.e-monsite.com/search/site/?q=%3C/title%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:22 GMT Vulnerability type:| XSS Vulnerability status:| Public...

techtricksworld.com XSS vulnerability

Vulnerable URL: http://www.techtricksworld.com/?s=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 10.11.2015 Latest check for patch:| 10.11.2015 13:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3306...

foundrmag.com XSS vulnerability

Vulnerable URL: http://foundrmag.com/prettyPhotoxss/x,/ Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 81400 Google Pagerank| 0 VIP website status:| No...

ikea.com XSS vulnerability

Vulnerable URL: http://www.ikea.com/au/en/catalog/categories/departments/kitchen/tools/conk/roomset/20153cosk%22%3E%3Cvideo+src=x+onerror=alert%28%27XSSPOSED%27%29%3E%3E29a/ Details: Description| Value ---|--- Patched:| Yes, at 07.09.2015 Latest check for patch:| 07.09.2015 14:57 GMT Vulnerabilit...

Ubuntu 12.04 LTS : apache2 update (USN-2625-1)

As a security improvement, this update makes the following changes to the Apache package in Ubuntu 12.04 LTS : Added support for ECC keys and ECDH ciphers. The SSLProtocol configuration directive now allows specifying the TLSv1.1 and TLSv1.2 protocols. Ephemeral key handling has been improved,...

Design/Logic Flaw

The Conrad Hotel aka com.wConradHotel application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7783

The Bill G. Bennett aka com.billgbennett application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Threat Outbreak Alert RuleID12041: Email Messages Distributing Malicious Software on October 20, 2014

Medium Alert ID: 36149 First Published: 2014 October 20 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12041 may contain the following files: Name |...

Information disclosure

The LiveAuctions.tv aka air.LiveAndroidMaxx application 2.005 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-2576

plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPTSSLVERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle MITM attacks...

Threat Outbreak Alert RuleID11654: Email Messages Distributing Malicious Software on September 22, 2014

Medium Alert ID: 35800 First Published: 2014 September 22 19:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11654 may contain the following files: Name ...

CVE-2014-5688

The Runtastic Pedometer aka com.runtastic.android.pedometer.lite application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Like4Like: Get Instagram Likes aka com.bepop.bepop application 2.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5641

CVE-2014-5641 affects the Cloud Manager (com.ileaf.cloud_manager) Android app v1.6. The vulnerability is due to failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificate. Documented impact is ex...