race-styles.com XSS vulnerability

Open Bug Bounty ID: OBB-457269 Description| Value ---|--- Affected Website:| race-styles.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

learning-styles-online.com XSS vulnerability

Vulnerable URL: https://www.learning-styles-online.com/include/message.php?message="'--!...

race-styles.com XSS vulnerability

Vulnerable URL: https://race-styles.com/showitem.php?id=4014%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3Einukat=376kat=70=0= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17127...

LibreOffice libwpd Denial of Service Vulnerability

LibreOffice is a free and open source office software suite developed by The Document Foundation TDF. The suite consists of Writer text documents, Calc spreadsheets and Impress presentations and other applications. libwpd is one of the libraries used to read and convert Word Perfect documents . A...

DEBIAN-CVE-2017-14226

WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service heap-based buffer over-read in the WPXTableList class in WPXTable.cpp. This vulnerability can be triggered in LibreOffice befor...

fairwaystyles.com XSS vulnerability

Vulnerable URL: https://www.fairwaystyles.com/unsubscribe?eid=%22/%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1337131 VIP website status:| No Check fairwaystyles.com...

openSUSE Security Update : roundcubemail (openSUSE-2016-1419)

roundcubemail was updated to version 1.1.7 and fixes the following issues : - Update to 1.1.7 - A maliciously crafted FROM value could cause extra parameters to be passed to the sendmail command boo1012493 - A maliciously crafted email could cause untrusted code to be executed cross site scriptin...

Support drag-and-drop“click-hijacking vulnerability in”using the tools: CJExploiter-vulnerability warning-the black bar safety net

CJExploiter is a support drag-and-drop Clickjacking vulnerability using an auxiliary tool. First, in the local use browser to open“index.html”, enter the target URL and click on“View Site”to. You can customize the JS, and finally click on the“Exploit it”, you will be able to get the POC. !...

Mapbox: Mapbox API Access Token with No Scope Can Read Styles

HI I created one api token with 0 scope. Then I sent the following request to server GET /styles/v1/katilthe?accesstoken=pk.eyJ1Ijoia2F0aWx0aGUiLCJhIjoiY2lsbWJwcWpjNjhmNnZubWNhYXdwZm5obyJ9.2cPnaIiXcFnDRFMfrD1TRw HTTP/1.1 Host: api.mapbox.com User-Agent: Mozilla/5.0 Windows NT 6.3; WOW64; rv:44.0...

CVE-2015-4385

Cross-site scripting XSS vulnerability in unspecified administration pages in the Imagefield Info module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "Administer image styles" permission to inject arbitrary web script or HTML via unspecified vectors...

Fedora 19 : mediawiki-1.23.7-1.fc19 (2014-16020)

http://www.mediawiki.org/wiki/Releasenotes/1.23MediaWiki1.23.7 - bug 66776, bug 71478 SECURITY: User PleaseStand reported a way to inject code into API clients that used format=php to process pages that underwent flash policy mangling. This was fixed along with improving how the mangling was done...

[SECURITY] Fedora 20 Update: kdeartwork-4.14.1-1.fc20

Additional artwork for KDE, including additional styles, themes...

php-revista <= 1.1.2 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. php-revista = 1.1.2 Remote SQL Injection Exploit Found by & contact : Cold z3ro , [email protected] script : http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=1025654400&bigmirror=0 Exploits :...

[SECURITY] Fedora 17 Update: kdeartwork-4.10.5-1.fc17

Additional artwork for KDE, including additional styles, themes...

[SECURITY] Fedora 18 Update: kdeartwork-4.10.5-1.fc18

Additional artwork for KDE, including additional styles, themes...

Fedora Update for kdeartwork FEDORA-2013-10182

Check for the Version of kdeartwork OpenVAS Vulnerability Test Fedora Update for kdeartwork FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CSP 1.0 Added to Firefox to Block XSS Attacks

After years of discussion and waiting, Mozilla has finally added Content Security Policy 1.0, a defense against some common attacks such as XSS, to its Firefox browser. CSP already has been implemented in Google Chrome and Internet Explorer and there was a limited implementation of it in Firefox...

[SECURITY] Fedora 18 Update: kdeartwork-4.10.4-1.fc18

Additional artwork for KDE, including additional styles, themes...

[SECURITY] Fedora 19 Update: kdeartwork-4.10.4-1.fc19

Additional artwork for KDE, including additional styles, themes...

Microsoft Internet Explorer CDispNode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within styl...