CVE-2017-2340

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

Realtime Subscriber Count - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Realtime Subscriber Count published at the 'play' market has multiple vulnerabilities...

ntamil.com XSS vulnerability

Vulnerable URL: http://www.ntamil.com/?s=%27;alert/XSSPOSED///%27;alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E=8=9 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:|...

Juniper Junos for M/MX Series Routers IPv6 Neighbor Discovery DoS (JSA10786)

According to its self-reported version and configuration, the remote Juniper Junos M/MX Series device is affected by a denial of service vulnerability in a Packet Forwarding Engine PFE when processing IPv6 neighbor discovery ND packets that originate from subscribers and are destined to M/MX seri...

e-kellys.com XSS vulnerability

Vulnerable URL:...

gtavstreams.com XSS vulnerability

Vulnerable URL: http://www.gtavstreams.com/redirect.php?url=%22/%3E%3CsvG/onLoad=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 19:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

payment.stepmomvideos.com XSS vulnerability

Vulnerable URL: https://payment.stepmomvideos.com/index.php?s=billing.payment=bangbros=mobile=m3rik==pps=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3Estepmomvid=bangbros=mobile=trial=mobileMT Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:|...

securityacademy.nl XSS vulnerability

Vulnerable URL: https://www.securityacademy.nl/nl/812search.htm?r=1489763456 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5414952 VIP website status:| No Check securityacademy.nl SSL connection:| Grade: A...

ofx.com XSS vulnerability

Vulnerable URL: https://www.ofx.com/en-us/online-sellers/?pid=4817"';-- Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 69482 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

londonmindful.com XSS vulnerability

Vulnerable URL:...

shoplyfter.com XSS vulnerability

Vulnerable URL: http://shoplyfter.com/t2/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3EGC1984.7.80.2362.0.0.0.0.0 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 77095 VIP website status:| No...

WordPress Mail Masta plugin SQL injection vulnerability (CNVD-2017-02638)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Mail Masta aka mail-masta is one of the email plug-ins. WordPress Mail Masta plugin version 1.0 in...

CVE-2017-6577

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: listid...

CVE-2017-6577

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: listid...

Sql injection

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: subscriberemail...

CVE-2017-6578

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: subscriberemail...

wickerkane.com XSS vulnerability

Vulnerable URL: http://www.wickerkane.com/list-products.php?section=outdoor%22%3E%3Csvg/onload=confirm/openbugbounty/%3E=dining-chair Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

primalhealthresearch.com XSS vulnerability

Vulnerable URL: http://www.primalhealthresearch.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23082561 VIP website status:| No Check primalhealthresearch.com SSL...

WordPress Plugin User Login Log 2.2.1 - Cross-Site Scripting

WordPress Plugin User Login Log 2.2.1 - Cross-Site Scripting Source: https://sumofpwn.nl/advisory/2016/storedcrosssitescriptingvulnerabilityinuserloginlogwordpressplugin.html Abstract A stored Cross-Site Scripting vulnerability was found in the User Login Log WordPress Plugin. This issue can be...

WordPress User Login Log 2.2.1 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Source: https://sumofpwn.nl/advisory/2016/storedcrosssitescriptingvulnerabilityinuserloginlogwordpressplugin.html Abstract A stored Cross-Site Scripting vulnerability was found in the User Login Log WordPress Plugin. This issue can be exploite...