2947 matches found
oz.by XSS vulnerability
Vulnerable URL: http://oz.by/personal/login.phtml?backuri=http://oz.by/xss" Details: Description| Value ---|--- Patched:| Yes, at 29.07.2015 Latest check for patch:| 29.07.2015 16:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31334 Google Pagerank| 5 VIP...
pagebin.com XSS vulnerability
Vulnerable URL: http://pagebin.com/directory/ Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 230240 Google Pagerank| 3 VIP website status:| No Check...
MacKeeper Zero Day Patched
MacKeeper, well known to Mac OS X users for its noisy pop-under ads stressing the need for a system cleanup, has patched a critical remote code execution vulnerability. The software is a utility that is marketed as capable of improving Mac performance and security. The vulnerability was disclosed...
onlinewelten.com XSS vulnerability
Vulnerable URL: http://www.onlinewelten.com/user/registrierung/?do=addmember=" Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 20:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31308 Google Pagerank| 5 VIP...
AntLabs InnGate security vulnerability patch
ANTLabs today is expected to roll out patches for a vulnerability in its InnGate Internet gateways that are popular in hospitality and convention locations. The gateways provide temporary Internet access to hotel guests or conference attendees using kiosks, for example. The vulnerability...
Schneider Electric Wonderware System Platform Vulnerabilities
OVERVIEW Ivan Sanchez of WiseSecurity Team has identified a fixed search path vulnerability in Schneider Electric’s Wonderware InTouch, Application Server, Historian, and SuiteLink applications, which are part of the Wonderware System Platform suite. Schneider Electric has produced a patch that...
MGASA-2015-0086 Updated cabextract packages fix CVE-2015-2060
A directory traversal issue in cabextract allows writing to locations outside of the current working directory, when extracting a crafted cab file that encodes the filenames in a certain manner CVE-2015-2060...
bziran.com XSS vulnerability
Vulnerable URL: http://www.bziran.com/adsregister.php?AdsID=1"RootByte Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 20:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100610 Google Pagerank| 0 VIP websit...
ManageEngine OpManager Applications Manager IT360 - FailOverServlet Multiple Vulnerabilities
ManageEngine OpManager Applications Manager IT360 - FailOverServlet Multiple Vulnerabilities Multiple vulnerabilities in FailOverServlet in ManageEngine OpManager, Applications Manager and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security...
Fedora 20 : php-5.5.21-1.fc20 (2015-1101)
22 Jan 2014, PHP 5.5.21 Core : - Upgraded cryptblowfish to version 1.3. Leigh - Fixed bug 60704 unlink bug with some files path. - Fixed bug 65419 Inside trait, self::class != CLASS. Julien - Fixed bug 65576 Constructor from trait conflicts with inherited constructor. dunglas at gmail dot com -...
Elipse SCADA Denial of Service Patch
Brazilian process management software developer Elipse has patched a serious denial-of-service vulnerability in its web-based Elipse SCADA application. The software is used in a number of critical industries worldwide, including manufacturing, energy, water and wastewater plants. The vulnerabilit...
MGASA-2014-0447 Updated libreoffice packages fix security vulnerabilities
It was discovered during routine code review that LibreOffice unconditionally executed certain VBA macros on loading Microsoft Office documents, contrary to user expectations CVE-2014-0247. A vulnerability in LibreOffice allows an attacker to send a document which when opened will trigger the...
MGASA-2014-0440 Updated pulseaudio package fixes RTP remote crash vulnerability
PulseAudio versions shipped in Mageia 3 and 4 were vulnerable to a remote RTP attack which could crash the PulseAudio server simply by sending an empty UDP packet. Additionally, the version of PulseAudio shipped in Mageia 4 was a pre-release version of PulseAudio v5 and has been updated to the...
The latest Bash vulnerability patch Junior programme-vulnerability warning-the black bar safety net
Bash broke the remote parsing command execution vulnerability, CVE-2 0 1 4-6 2 7 1, the spread of major Linux distributions and MacOSX systems. Vulnerability can be directly in the Bash support the Web CGI environment remote execution of arbitrary commands. bash is injected after the public...
Updated bash packages fix CVE-2014-7169
Updated bash packages fix security vulnerability: It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or...
pornhub.com XSS vulnerability
Vulnerable URL: http://www.pornhub.com/video/search?search=%22%2Fonload=alert'xssposed' Details: Description| Value ---|--- Patched:| Yes, at 23.10.2014 Latest check for patch:| 23.10.2014 16:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 75 Google Pagerank|...
Google Drive Vulnerability Leaks Users' Private Data
Another privacy issue has been discovered in Google Drive which could have led sensitive and personal information stored on the cloud service exposed to unauthorized parties. The security flaw has now patched by Google, but its discovery indicates that the vulnerability of cloud data when accesse...
mysql55 security update
CentOS Errata and Security Advisory CESA-2014:0537 Updated mysql55-mysql packages that fix several security issues are now available for Red Hat Software Collections 1. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System...
SOL15282 - Apache Struts vulnerability CVE-2014-0114
F5 Product Development has determined that these specific product versions, while they use a version of Apache Struts that has not been patched specifically for CVE-2014-0114, the Configuration utility inputs are appropriately sanitized to ensure these versions are not vulnerable to the issue...