Improper Certificate Validation

JRuby-OpenSSL is vulnerable to Improper Certificate Validation. The vulnerability is due to missing hostname verification due to failure to ensure that the hostname in the SSL certificate matches the intended connection target, allowing man-in-the-middle attacks with a valid certificate for a...

Linux Distros Unpatched Vulnerability : CVE-2024-47750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix Use-After-Free of rsvqp on HIP08 Currently rsvqp is freed before...

CVE-2024-49782

IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through email notifications generated by OpenPages or disrupt notification...

CVE-2024-56733

CVE-2024-56733 affects Password Pusher (versions ≤ 1.50.3). A vulnerability allows an attacker to copy the session cookie before logout, potentially enabling session hijacking until the token expires or is cleared. Root cause centers on accessing an active session cookie (e.g., MITM, XSS, or loca...

GHSA-3G2P-7C6P-VJ8C Apache Qpid Python client Improper certificate validation

The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

curl: CVE-2021-22924: Bad connection reuse due to flawed path name checks

Summary: Curlsslconfigmatches attempts to compare whether two SSL connections have identical SSL security options or not. The idea is to avoid reusing a connection that uses less secure, or completely different security options such as capath, cainfo or certificate/issuer pinning. Unfortunately...

HawkScan - Security Tool For Reconnaissance And Information Gathering On A Website

Security Tool for Reconnaissance and Information Gathering on a website. python 2.x & 3.x This script use "WafW00f" to detect the WAF in the first step https://github.com/EnableSecurity/wafw00f This script use "Sublist3r" to scan subdomains https://github.com/aboul3la/Sublist3r This script use...

How to configure Email Notifications when using Gmail or Google Apps Mail in Veeam ONE

Challenge You need to configure email notifications to be sent to a Gmail or Google Apps Mail account in Veeam ONE. Cause Use of port 587 is required for TLS when communicating with Gmail or Google Apps Mail. Solution Set the Port to 587 in Veeam ONE console Options Server Settings SMTP Settings...

SSL Insecure Protocols

The remote server offers insecure SSL protocol version which can lead to vulnerability exploitation. No source data...

hartslagmetercenter.nl XSS vulnerability

Vulnerable URL: https://www.hartslagmetercenter.nl/category/12584%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/hartslagmeters.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

securesupport.citizensfla.com XSS vulnerability

Vulnerable URL: https://securesupport.citizensfla.com/ci/fattach/get/383569/1494129097/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

massage-x.com XSS vulnerability

Vulnerable URL: http://massage-x.com/?nats="NTg1MToyOjM5,0,0,0,0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 915313 VIP website status:| No Check massage-x.com SSL connection:|...

hotelesbaratos.com XSS vulnerability

Vulnerable URL: http://www.hotelesbaratos.com/buscar/?destino=+%22%3E%3Csvg%2Fonload%3Dprompt%27OPENBUGBOUNTY%27%3E%20%3Ch1%3E%20OPENBUGBOUNTY%20%3C/h1%3E%20%3Cmarquee%3E%20OPENBUGBOUNTY%20%3C/marquee%3E==17=2017-4=18=2017-4habitacion=-1 Details: Description| Value ---|--- Patched:| No Latest che...

gov.ai IFRAME Injection vulnerability

Vulnerable URL: http://www.gov.ai/elections/registration.php?query="' XANY &submit.x;=17&submit.y;=3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.08.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 821430 VIP website...

ssh101.com XSS vulnerability

Vulnerable URL: http://www.ssh101.com/secure/index.php?id="' Details: Description| Value ---|--- Patched:| Yes, at 13.01.2017 Latest check for patch:| 13.01.2017 04:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 237578 VIP website status:| No Check ssh101.co...

kuchniabakino.blox.pl XSS vulnerability

Vulnerable URL: http://kuchniabakino.blox.pl?page=blogPublicSearch= blogPublicSearch'A Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

Бонус Плюс - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Бонус Плюс published at the 'play' market has multiple vulnerabilities...

wasdrogerstore.nl XSS vulnerability

Vulnerable URL: http://www.wasdrogerstore.nl/product/679787/miele";alert'OPENBUGBOUNTY';a="/miele-tkb-540-wp.html Details: Description| Value ---|--- Patched:| Yes, at 19.10.2016 Latest check for patch:| 19.10.2016 12:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

jp.pandahall.com XSS vulnerability

Vulnerable URL: http://jp.pandahall.com/ProductSearch?keyword="" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check jp.pandahall.com SSL connection:| Grade: A...

amray.com XSS vulnerability

Vulnerable URL: http://www.amray.com/whois/whois.php?domain=canada905.com'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 85077 VIP website status:| No Check amray.com SSL...