ptu.moe-st.gov.mm XSS vulnerability

Open Bug Bounty ID: OBB-486178 Description| Value ---|--- Affected Website:| ptu.moe-st.gov.mm Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-tropez.nl XSS vulnerability

Open Bug Bounty ID: OBB-477938 Description| Value ---|--- Affected Website:| st-tropez.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-felix-de-lodez.fr XSS vulnerability

Open Bug Bounty ID: OBB-459529 Description| Value ---|--- Affected Website:| st-felix-de-lodez.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

st-germain-sous-doue.fr XSS vulnerability

Open Bug Bounty ID: OBB-459517 Description| Value ---|--- Affected Website:| st-germain-sous-doue.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

st-marys-rc78.lancsngfl.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-388552 Description| Value ---|--- Affected Website:| st-marys-rc78.lancsngfl.ac.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

Directory traversal

Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path...

UBUNTU-CVE-2014-3744

Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path...

CVE-2014-3744

The CVE-2014-3744 issue is a directory traversal vulnerability in the Node.js st module prior to 0.2.5. Vulnerable versions mishandle URL-encoded dots (e.g., %2e and %2e%2e), allowing remote attackers to read arbitrary files on the server. Evidence from multiple sources confirms the affected comp...

st-paul-theater.com XSS vulnerability

Open Bug Bounty ID: OBB-361009 Description| Value ---|--- Affected Website:| st-paul-theater.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Open Redirect

Overview st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 redirect to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers trea...

stjean.org XSS vulnerability

Vulnerable URL: http://www.stjean.org/apps/news/shownews.jsp?RECID=461679=0=News%20Post%20Summer%20Reading%20List%20-%20St.%20Jean%20Baptiste%20High%20School%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E=true Details: Description| Value ---|--- Patched:| Yes, at 15.10.2017 Latest check for patch:|...

sthelena.k12.ca.us XSS vulnerability

Vulnerable URL: http://www.sthelena.k12.ca.us/apps/news/shownews.jsp?RECID=415566=0=News%20Post%20BAC%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3Ena%20Unified%20School%20District Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

stmaryhc.org XSS vulnerability

Vulnerable URL: http://www.stmaryhc.org/about/contactform.php/%22%27--!%3E%3CScript%20/K/%3Econfirm1%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4781534 VIP...

chalfontstgiles-pc.gov.uk XSS vulnerability

Vulnerable URL: http://www.chalfontstgiles-pc.gov.uk/gallery.php?cat=all%22%27--!%3E%3CScript%20/K/%3EalertOPENBUGBOUNTY%3C/Script%20/K/%3E=list Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

A week in security (August 28 – September 3)

Last week, we looked at what actions Kronos can perform in the final installment of a 2-part post. We also dived into Locky, again, a ransomware that just made a comeback, and found that its latest variant as of this writing has anti-sandboxing capabilities. This means that once Locky has...

123.st XSS vulnerability

Open Bug Bounty ID: OBB-285439 Description| Value ---|--- Affected Website:| 123.st Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stagneshs.org XSS vulnerability

Vulnerable URL: https://www.stagneshs.org/apps/album/index.jsp?dir=departments/79395=%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.08.2017 Vulnerability type:| XSS Vulnerability status:|...

Jaff Malware Probe Uncovers Link to Cybercrime Marketplace

An investigation into a new strain of Jaff ransomware uncovered a shared backend infrastructure between the malware and a black market bazaar selling stolen bank and credit card account information. Researchers at Heimdal Security said the cybercrime marketplace they found appeared mature, offeri...

Security of St. Jude Pacemakers

This is a good summary article about the horrible security of St. Jude pacemakers, and the history of the company not doing anything about it...

stangelas.nuigalway.ie XSS vulnerability

Vulnerable URL: http://www.stangelas.nuigalway.ie/departments/coursedetails.php?id=AS052"'--!&=en Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...