gothamgazette.com XSS vulnerability

Vulnerable URL: http://www.gothamgazette.com/budgetgame/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 507971 Google...

urbien.com XSS vulnerability

Vulnerable URL: http://urbien.com/floordata/errorMsg.html?errMsg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11314541 Google...

dashboard.admin.ucla.edu XSS vulnerability

Vulnerable URL: http://dashboard.admin.ucla.edu/portalbody.cfm?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

old.buhl.de XSS vulnerability

Vulnerable URL: http://old.buhl.de/aboservice/newsletter/unsubscribe.asp?eMail=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

Grandstream GXV3275 1.0.3.30 - Multiple Vulnerabilities

Grandstream GXV3275 1.0.3.30 - Multiple Vulnerabilities The Grandstream GXV3275 is an Android-based VoIP phone. Several vulnerabilities were found affecting this device. The device ships with a default root SSH key, which could be used as a backdoor: /system/root/.ssh cat authorizedkeys Public ke...

Debian DLA-72-2 : rsyslog regression update

The Wheezy patch left an unresolved symbol in the imklog module of the Squeeze version. rsyslog worked fine except that messages from the kernel couldn't be submitted any longer. This update fixes this issue. NOTE: Tenable Network Security has extracted the preceding description block directly fr...

CacheFlow CacheOS 3.1.x/4.0.x/4.1 Unresolved Domain Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5305/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. User supplied data is not sanitized before being included in an unresolved host...

Astium VoIP PBX 2.1 build 25399 - Multiple VulnerabilitiesRemote Command Execution

Astium VoIP PBX 2.1 build 25399 - Multiple VulnerabilitiesRemote Command Execution !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...

Liferay 5.x / 6.x Cross Site Scripting

Multiple xss issues in Liferay Description: Liferay Portal is an enterprise portal written in Java Multiple xss vulnerabilities where found in liferay. Because liferay has a "remember me" option in their login screen that stores an encrypted password in a cookie this is more problematic than it...

Unfixed XSS vulnerability at www.pontarlier-zoom.fr

Security researcher Atmon3r, has submitted on 15/02/2012 a cross-site-scripting XSS vulnerability affecting www.pontarlier-zoom.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Unfixed XSS vulnerability at guy.erotic.free.fr

Security researcher Atmon3r, has submitted on 16/12/2011 a cross-site-scripting XSS vulnerability affecting guy.erotic.free.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is currently...

Unfixed XSS vulnerability at disorder.compbio.iupui.edu

Security researcher lljkrieg, has submitted on 11/04/2011 a cross-site-scripting XSS vulnerability affecting disorder.compbio.iupui.edu, which at the time of submission ranked 33647 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It...

Unfixed XSS vulnerability at www.avstv.com

Security researcher AR3SW0RMED, has submitted on 30/06/2011 a cross-site-scripting XSS vulnerability affecting www.avstv.com, which at the time of submission ranked 1525001 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It is...

Unfixed XSS vulnerability at www.endproject.net

Security researcher AR3SW0RMED, has submitted on 30/06/2011 a cross-site-scripting XSS vulnerability affecting www.endproject.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It is...

Unfixed XSS vulnerability at www.newvegasnexus.com

Security researcher AR3SW0RMED, has submitted on 27/06/2011 a cross-site-scripting XSS vulnerability affecting www.newvegasnexus.com, which at the time of submission ranked 41213 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It is...

Unfixed XSS vulnerability at lenovolaptop.co.za

Security researcher nullbyt3, has submitted on 24/04/2011 a cross-site-scripting XSS vulnerability affecting lenovolaptop.co.za, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...

Unfixed XSS vulnerability at bankbaba.org

Security researcher CyberBellona, has submitted on 23/04/2011 a cross-site-scripting XSS vulnerability affecting bankbaba.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at ibe.s7.ru

Security researcher trv, has submitted on 04/01/2011 a cross-site-scripting XSS vulnerability affecting ibe.s7.ru, which at the time of submission ranked 17935 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently unfixed...

McAfee Cross Site Scripting / Information Disclosure

Vulnerabilities in McAfee.com 1. VULNERABILITY DESCRIPTION - Cross Site Scripting http://download.mcafee.com/products/webhelp/4/1033/javascript:top.location.replace'attacker.in' - Information Disclosure Internal Hostname: http://www.mcafee.com/js/omniture/omnitureprofile.js $ ruby host-extract.rb...

Unfixed XSS vulnerability at gratuit-domaine.eu

Security researcher warvector, has submitted on 12/12/2010 a cross-site-scripting XSS vulnerability affecting gratuit-domaine.eu, which at the time of submission ranked 602603 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...