edreams.com.br XSS vulnerability

Vulnerable URL: http://www.edreams.com.br/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:58 GMT Vulnerability type:| XSS Vulnerability status:|...

edreams.com.ve XSS vulnerability

Vulnerable URL: http://www.edreams.com.ve/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:58 GMT Vulnerability type:| XSS Vulnerability status:|...

edreams.com.tr XSS vulnerability

Vulnerable URL: http://www.edreams.com.tr/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:58 GMT Vulnerability type:| XSS Vulnerability status:|...

edreams.com.mx XSS vulnerability

Vulnerable URL: http://www.edreams.com.mx/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:58 GMT Vulnerability type:| XSS Vulnerability status:|...

edreams.com.ar XSS vulnerability

Vulnerable URL: http://www.edreams.com.ar/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:58 GMT Vulnerability type:| XSS Vulnerability status:|...

Security Advisories from TEHTRI-Security at HITB Europe

Gents, TEHTRI-Security was invited to give a talk called "Web In The Middle, Attacking Clients", at the first Hack In The Box Europe, Amsterdam http://conference.hackinthebox.org/hitbsecconf2010ams/ . During our talk, we released multiple advisories and we explained many issues related to some...