Fixed XSS vulnerability at www.wesecure.nl

Security researcher RedToor, has submitted on 17/01/2014 a cross-site-scripting XSS vulnerability affecting www.wesecure.nl, which at the time of submission ranked 14032513 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2015. It is...

phpyun SQL注入

简要描述： 处理不当导致注入，绕过waf 详细说明： 在/model/qqconnect.class.php文件中： function certaction $id=$GET'id'; $arr=@explode"|",base64decode$id; if$id && isarray$arr && $arr0 && $arr2==$this-config'coding' $row=$this-obj-DBselectonce"companycert","uid='".$arr0."' and check2='".$arr1."'"; ifisarray$row...

Oracle Linux 4 / 5 : oracle-validated (ELSA-2011-2031)

Description of changes: - Fix for security bug CVE-2011-2306 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2011-2031. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Unfixed Redirect vulnerability at www.sayit.ie

Security researcher p0pc0rn, has submitted on 11/01/2012 a Redirect vulnerability affecting www.sayit.ie, which at the time of submission ranked 3901676 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently unfixed. If you...

Unfixed XSS vulnerability at publications.univ-st-etienne.fr

Security researcher Atmon3r, has submitted on 11/01/2012 a cross-site-scripting XSS vulnerability affecting publications.univ-st-etienne.fr, which at the time of submission ranked 149236 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/201...

Unfixed Redirect vulnerability at www.nagt.org

Security researcher p0pc0rn, has submitted on 11/01/2012 a Redirect vulnerability affecting www.nagt.org, which at the time of submission ranked 9603492 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently unfixed. If you...

Unfixed XSS vulnerability at www.cadoons-boutique.com

Security researcher Atmon3r, has submitted on 10/01/2012 a cross-site-scripting XSS vulnerability affecting www.cadoons-boutique.com, which at the time of submission ranked 710303 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/01/2012. It i...

Unfixed XSS vulnerability at www.brancopelle.com

Security researcher Cr4t3r, has submitted on 09/02/2012 a cross-site-scripting XSS vulnerability affecting www.brancopelle.com, which at the time of submission ranked 17766028 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2012. It is...

Unfixed XSS vulnerability at www.marasimba.com

Security researcher IrIsT.Ir, has submitted on 07/01/2012 a cross-site-scripting XSS vulnerability affecting www.marasimba.com, which at the time of submission ranked 1192235 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. It is...

P2P Encryption Program now available from PCI Council

The PCI council has updated the Point-to-Point encryption P2PE program requirements PDF. The update impacts merchants, payment applications, point of sale vendors and service providers. As a participating organization of the PCI P2PE task force, providing input into the standard, I wanted to...

Unfixed XSS vulnerability at tomchalk.com

Security researcher jokers, has submitted on 04/02/2012 a cross-site-scripting XSS vulnerability affecting tomchalk.com, which at the time of submission ranked 10702092 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currently...

Unfixed XSS vulnerability at www.citibus.fr

Security researcher Atmon3r, has submitted on 04/02/2012 a cross-site-scripting XSS vulnerability affecting www.citibus.fr, which at the time of submission ranked 8806411 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/02/2012. It is current...

Unfixed Script Insertion vulnerability at www.profileex.com

Security researcher Sony, has submitted on 04/01/2012 a Script Insertion vulnerability affecting www.profileex.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. It is currently unfixed. If...

RSA 2012: Mobile, Cloud, and Intelligent Control

It was good to catch up with our customers and partners at RSA 2012 this week. Much of the buzz this year was around mobile devices and securing the cloud. We were glad to see innovative organizations introducing compliance-validated architectures based on these emerging technologies. One such...

Fixed XSS vulnerability at autonews.sat1.de

Security researcher owege, has submitted on 29/02/2012 a cross-site-scripting XSS vulnerability affecting autonews.sat1.de, which at the time of submission ranked 11086 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2015. It is currently...

Fixed XSS vulnerability at e360.yale.edu

Security researcher Matias Vicente, has submitted on 28/02/2012 a cross-site-scripting XSS vulnerability affecting e360.yale.edu, which at the time of submission ranked 3313 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...

Fixed XSS vulnerability at www.coqnu.com

Security researcher Atmon3r, has submitted on 27/02/2012 a cross-site-scripting XSS vulnerability affecting www.coqnu.com, which at the time of submission ranked 10161 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is currently...

Fixed XSS vulnerability at egglondon.net

Security researcher Tux1, has submitted on 26/02/2012 a cross-site-scripting XSS vulnerability affecting egglondon.net, which at the time of submission ranked 7529339 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is currently...

Fixed XSS vulnerability at buyinglamictal.org

Security researcher Atmon3r, has submitted on 26/02/2012 a cross-site-scripting XSS vulnerability affecting buyinglamictal.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is currently...

Unfixed XSS vulnerability at skicircus.loop-server.com

Security researcher krusch, has submitted on 24/02/2012 a cross-site-scripting XSS vulnerability affecting skicircus.loop-server.com, which at the time of submission ranked 7442751 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It ...