usccb.org XSS vulnerability

Vulnerable URL: http://www.usccb.org/search.cfm?site=newusccb=newusccbfrontend="&btnG.x;=8&btnG.y;=18〈=eng Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16848 Google Pagerank| 7 V...

Libmimedir VCF Memory Corruption PoC

Libmimedir suffers from a memory corruption vulnerability. Adding two NULL bytes to the end of a VCF file allows a user to manipulate free calls which occur during it's lexer's memory clean-up procedure. This could lead to exploitable conditions such as crafting a specific memory chunk to allow f...

Unfixed XSS vulnerability at www.maybankard.net

Security researcher SaifuddinAmri, has submitted on 05/03/2015 a cross-site-scripting XSS vulnerability affecting www.maybankard.net, which at the time of submission ranked 166631 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It i...

Unfixed XSS vulnerability at www.i-mxms.com

Security researcher DevaDraco, has submitted on 27/02/2015 a cross-site-scripting XSS vulnerability affecting www.i-mxms.com, which at the time of submission ranked 20181176 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...

ManageEngine OpManager Applications Manager IT360 - FailOverServlet Multiple Vulnerabilities

ManageEngine OpManager Applications Manager IT360 - FailOverServlet Multiple Vulnerabilities Multiple vulnerabilities in FailOverServlet in ManageEngine OpManager, Applications Manager and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security...

ManageEngine Netflow Analyzer / IT360 - Arbitrary File Download

Arbitrary file download in ManageEngine Netflow Analyzer and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 30/11/2014 / Last updated: 3/12/2014 Background on the affected produc...

ManageEngine Netflow Analyzer IT360 - Arbitrary File Download

ManageEngine Netflow Analyzer IT360 - Arbitrary File Download Arbitrary file download in ManageEngine Netflow Analyzer and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 30/11/20...

ManageEngine Netflow Analyzer / IT360 File Download Vulnerability

ManageEngine Netflow Analyzer and IT360 suffer from an arbitrary file download vulnerability. This is part 9 of the ManageOwnage series. For previous parts see 1. Today we have yet another 0 day - an arbitrary file download vulnerability that be exploited unauthenticated in NetFlow Analyzer and...

ManageEngine EventLog Analyzer - Multiple Vulnerabilities (2)

Multiple vulnerabilities in ManageEngine EventLog Analyzer Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 05/11/2014 / Last updated: 05/11/2014 Background on the affected product:...

Prometeo 1.0.65 - SQL Injection Vulnerability

No description provided by source. // / ////// //////// /// / / / / // / / / / /// //////// / / // / / / // / // /// //////// // ================================= Prometeo vers. 1.0.65 -SQLi Vulnerability- ================================= -Vulnerability ID: LD3-Product: Prometeo-Vendor: Prometeo...

ClanTiger <= 1.1.1 (slug) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Kaspersky Internet Security 2013 - Denial of Service Vulnerability

No description provided by source. I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky...

Unfixed XSS vulnerability at www.titivillus.it

Security researcher MrCyph3r, has submitted on 06/10/2014 a cross-site-scripting XSS vulnerability affecting www.titivillus.it, which at the time of submission ranked 11882046 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2015. It is...

Ian Dunn: Path Disclosure Vulnerability

Hey , I'm Jamal in this report i want to show you a Vulnerability Found It In basic-google-maps-placemarks Pugin Description: Title : Path Disclosure Vulnerability Status : Unfixed Tested on : Firefox Author : Jamal Eddine Email : [email protected] Discovered : 2014/05/04 Report it : 2014/05/04...

Project description is persistent XSS vector for project admins

This issue is a clone of another one that was fixed in OD but left unfixed in BTF as "admin xss". It has been pointed out by several customers that this exploit requires only project admin level of privilege. The following project description: code alert1 code Pops up in the view project page, th...

Unfixed XSS vulnerability at www.shopparos.gr

Security researcher d@ydream, has submitted on 14/09/2013 a cross-site-scripting XSS vulnerability affecting www.shopparos.gr, which at the time of submission ranked 16206287 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/02/2014. It is...

Dell.com Open Redirection

Title: Dell Open URL Redirection Vulnerability Status: Unfixed Severity: High Works on: Any browser with any version Homepage: www.Dell.com Author: GoMeR-12 Email: [email protected] Description: I have found Open URL Redirection Vulnerabilities in DEll 'sdialogs . ThisVulnerability is exploitable...

Facebook Open Redirect

Description: Title : Facebook Open URL Redirection Vulnerability 2013 Status : Unfixed Severity : High Works on : Any browser with any version Homepage : www.facebook.com Author : Arul Kumar.V Email : [email protected] I have found Open URL Redirection Vulnerabilities in facebook's dialogs...

Kaspersky Internet Security 2013 - Denial of Service

I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky product which includes the firewall...

Kaspersky Internet Security 2013 Denial Of Service

I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky product which includes the firewall...