local.insideottawavalley.com XSS vulnerability

Open Bug Bounty ID: OBB-552528 Description| Value ---|--- Affected Website:| local.insideottawavalley.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| OwnLocal Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Jiangxi Lugu Network Technology Co., Ltd. website construction system with SQL injection vulnerability

Jiangxi Six Valley Network Technology Co., Ltd. is a company that provides targeted, personalized enterprise website construction solutions. Jiangxi LiuGu Network Technology Co., Ltd. website construction system exists SQL injection vulnerability. Attackers can use the vulnerability to access or...

lehighvalley.findandgoseek.net XSS vulnerability

Open Bug Bounty ID: OBB-452477 Description| Value ---|--- Affected Website:| lehighvalley.findandgoseek.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

Wallarm CEO Ivan Novikov joins Forbes Technology Council

White hat security professional and entrepreneur Ivan Novikov has joined the Forbes Technology Council, an invitation-only community that serves as a platform for technology leaders to discuss and solve pressing business challenges with their peers and share their insights with readers on...

grandvalleybank.com XSS vulnerability

Vulnerable URL: https://www.grandvalleybank.com/branchlocation.php?branch=1"...

CVE-2017-9594

The "SVB Mobile" by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka svb-mobile/id796429885 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9594

CVE-2017-9594 affects the iOS app “SVB Mobile” (Sau k Valley Bank) version 3.0.0, where the app does not verify X.509 certificates from SSL servers. This is the root cause: lack of certificate validation in TLS, allowing MITM attackers to spoof servers and potentially obtain sensitive information...

green_valley.explore-nevada.us XSS vulnerability

Vulnerable URL: http://greenvalley.explore-nevada.us/Profile/Demographicsbyzipcode.asp?zipcode=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

High Severity BIND Vulnerability Can Lead to A Crash

The Internet Systems Consortium patched the BIND domain name system this week, addressing a remotely exploitable vulnerability it considers high severity and said could lead to a crash. The issue affects servers that use both the DNS64 and RPZ function simultaneously. DNS64 is a mechanism for...

galleries.cartoonvalley.com XSS vulnerability

Vulnerable URL: http://galleries.cartoonvalley.com/2/jessica/index.html?id=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E1009 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Goodbye! Yahoo to rename itself 'Altaba' after Verizon Deal

It's time to say goodbye to Yahoo! While Yahoo's core internet business was being sold to Verizon for $4.8 Billion, the remaining portions of the company left behind is renaming itself to Altaba Inc, which marks the sad ending of one of the most familiar brand names on the internet. In a public...

Minuscule: Valley of the Ants - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Minuscule: Valley of the Ants published at the 'play' market has multiple vulnerabilities...

Forest Master - Secret Valley - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Forest Master - Secret Valley published at the 'play' market has multiple vulnerabilities...

NSA's Rogers Quiet on Apple-FBI Debate at RSA

SAN FRANCISCO—National Security Agency and U.S. Cyber Command director Admiral Michael S. Rogers stood before tens of thousands of RSA Conference attendees on Tuesday and asked for help. In what has almost become a speaking slot reserved for the government to use as a recruiting pitch of some sor...

molevalley.gov.uk XSS vulnerability

Vulnerable URL: http://www.molevalley.gov.uk/index.cfm?articleid=17355 Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 858892 Google Pagerank| 4 VIP websit...

trinityvalleyschool.org XSS vulnerability

Vulnerable URL: http://www.trinityvalleyschool.org/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 11.04.2016 Latest check for patch:| 11.04.2016 17:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 88779...

shenandoahvalleynightout.com XSS vulnerability

Vulnerable URL: http://www.ShenandoahValleyNightOut.com?option=calendar=12%2F31%2F1969id=5"=1=time=false Details: Description| Value ---|--- Patched:| Yes, at 31.03.2016 Latest check for patch:| 31.03.2016 06:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

chetvalleychurches.org vulnerability

Vulnerable URL: http://www.chetvalleychurches.org/goto-link.php?linkid=14=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 22519412 Google Pagerank| 1 VIP website status:| No Check...

cheddarvalleygazette.co.uk XSS vulnerability

Vulnerable URL: http://www.cheddarvalleygazette.co.uk/search/search.html?searchType==%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E= Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:33 GMT Vulnerability type:| XSS Vulnerability status:...

sturgeonvalleygolfclub.com XSS vulnerability

Vulnerable URL: https://www.sturgeonvalleygolfclub.com/resetpassword.aspx Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website...