visitmaramures.ro XSS vulnerability

Open Bug Bounty ID: OBB-593607 Description| Value ---|--- Affected Website:| visitmaramures.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PYSEC-2018-111

Ajenti version version 2 contains a Cross ite Request Forgery CSRF vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server . This attack appear to be exploitable via Being a CSRF, victim interaction is needed, when the...

CVE-2017-17777

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter...

Exiv2 Denial of Service Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel. A security vulnerability exists in the 'Internal::TiffReader::visitDirectory' function of the tiffvisitor.cpp file in Exiv2 version 0.26. A remote attacker can exploit...

DEBIAN-CVE-2017-11683

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

visit-x.de XSS vulnerability

Vulnerable URL: https://www.visit-x.de/CAMS/DE/Verzeichnis1.html?camsearch=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3D%22y%22+onerror%3Dalert%28%2Fopenbugbounty%2F%29%3E=CamSearch Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:31 GMT Vulnerabili...

visit-pontevedra.com XSS vulnerability

Vulnerable URL: http://www.visit-pontevedra.com/esp/8/5/buscador.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3243440 VIP website status:| No Check visit-pontevedra.com SSL...

Visit IRAN (Tourism) - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Visit IRAN Tourism published at the 'play' market has multiple vulnerabilities...

Visit Ajman - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Visit Ajman published at the 'play' market has multiple vulnerabilities...

visitouterhebrides.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.visitouterhebrides.co.uk/engine/referrer.asp?web=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 785564 VIP website status:| No Check...

visitplymouth.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.visitplymouth.co.uk/engine/referrer.asp?web=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 668706 VIP website status:| No Check...

visitlaunceston.co.uk vulnerability

Vulnerable URL: http://www.visitlaunceston.co.uk/engine/referrer.asp?web=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 20.12.2015 Latest check for patch:| 20.12.2015 11:32 GMT Vulnerability status:| Publicly disclosed Alexa Rank| 3301627 Google Pagerank| 3 VIP...

visitsouthdevon.co.uk vulnerability

Vulnerable URL: http://www.visitsouthdevon.co.uk/engine/referrer.asp?web=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 939670 Google Pagerank| 4 VIP website status:| No Check...

visit-dorset.com vulnerability

Vulnerable URL: http://www.visit-dorset.com/engine/referrer.asp?web=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 461824 Google Pagerank| 4 VIP website status:| No Check...

visitisleofwight.co.uk vulnerability

Vulnerable URL: http://www.visitisleofwight.co.uk/engine/referrer.asp?web=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 397161 Google Pagerank| 4 VIP website status:| No Check...

visitstratford.ca XSS vulnerability

Open Bug Bounty ID: OBB-76817 Description| Value ---|--- Affected Website:| visitstratford.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-7539

The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7539

The Zhang Zhijun Taiwan Visit 2014-06-25 aka com.zizizzi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7539

CVE-2014-7539 affects the Android app “com.zizizzi” v1.0 (Zhang Zhijun Taiwan Visit). The issue is lack of X.509 certificate verification for SSL servers, allowing MITM attackers to spoof servers and exfiltrate sensitive data. The root cause is improper TLS validation in the app; no remediation o...

JC URLshrink 1.3.1 - Remote Code Execution Vulnerability

No description provided by source. .--. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8|-\IIIIII/-| / \ / @ +Iranian Are The Best In World+ + + /I N F O\ + | | +...