CVE-2017-5447

creationtimestamp| type| source ---|---|--- 2017-05-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42071...

EternalChampion - Windows SMB Remote Code Execution Vulnerability (CVE-2017-0146)

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...

Inout StickBoard 1.0 Script - Improper Access Restrictions Vulnerability

Exploit for php platform in category web applications Vulnerability: Security Bypass Date: 13.01.2017 Vendor Homepage: http://www.inoutscripts.com/ Script Name: Inout StickBoard Script Script Version: v1.0 Script Buy Now: http://www.inoutscripts.com/demo/inout-stickboard/demo/ Author: İhsan Şenca...

Microsoft Internet Explorer 8 8 MSHTML SRunPointer::SpanQualifier/RunType Out-Of-Bounds Read

Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the sixteenth entry in that series. Unfortunately I won't be able to publish everything within one month at the current rate, so I may continue to publish these throug...

OPENSUSE-SU-2016:2495-1 Security update for kde-cli-tools5

This update for kde-cli-tools5 fixes the following vulnerability: CVE-2016-7787: user could sneak an unicode string terminator in the kdesu invocation boo1001916...

UF A6 /yyoa/assess/js/initDataAssess. jsp information disclosure

No description provided by source...

cachacasalinas.com.br XSS vulnerability

Vulnerable URL: http://www.cachacasalinas.com.br/home.php?lang=pt" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4772798 VIP website status:| No Check cachacasalinas.com.br SSL...

Iris ID IrisAccess iCAM4000iCAM7000 - Hard-Coded Credentials Remote Shell Access

Iris ID IrisAccess iCAM4000iCAM7000 - Hard-Coded Credentials Remote Shell Access Iris ID IrisAccess iCAM4000/iCAM7000 Hardcoded Credentials Remote Shell Access Vendor: Iris ID, Inc. Product web page: http://www.irisid.com http://www.irisid.com/productssolutions/irisaccesssystem/irisaccess4000/...

CVE-2016-3652

creationtimestamp| type| source ---|---|--- 2016-06-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40041...

benq.com.vn IFRAME Injection vulnerability

Vulnerable URL: http://benq.com.vn/search/module?benqcsrftokenname=e18d6e438d546f04%202f99223ab9293da9=%22%3E%3Ciframe%20src=%22https://www.openbugbounty.org%22%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:58 GMT Vulnerability type:|...

Express Zip 2.40 - Directory Traversal

Express Zip 2.40 - Directory Traversal !/usr/bin/python -w Title : Express Zip = 2.40 Path Traversal Date : 07/04/2016 Author : R-73eN Tested on : Windows Xp / Windows 7 Ultimate Software Link : http://www.nchsoftware.com/zip/ Download Link: http://www.nchsoftware.com/zip/zipplus.exe Vulnerable...

nif.org.in XSS vulnerability

Vulnerable URL: http://nif.org.in/search.php?searchtext=%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 364112 Google Pagerank| ...

members.scouts.org.uk Open Redirect vulnerability

Vulnerable URL: http://members.scouts.org.uk/flash/12%20Providing%20a%20Balanced%20Programme/08%20summary/flashdetection.swf?flashContentURL=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect...

www1.wne.edu XSS vulnerability

Vulnerable URL: https://www1.wne.edu/oit/index.cfm?message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=1=doc.3306 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

sps.edu XSS vulnerability

Vulnerable URL: https://www.sps.edu/podium/default.aspx?t=52562=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

azfiles.ru vulnerability

Vulnerable URL: http://www.azfiles.ru/go/?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 396889 Google Pagerank| 1 VIP website status:| No Check azfiles.ru SSL connection:|...

MGASA-2015-0344 Updated webmin packages fix CVE-2015-1990

Updated webmin package fixes security vulnerability: A malicious website could create links or Javascript referencing the xmlrpc.cgi script, triggered when a user logged into Webmin visits the attacking site CVE-2015-1990...

CVE-2015-2435

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1,...

jcrew.com XSS vulnerability

Vulnerable URL: https://www.jcrew.com/jo/womenscategory/shoes/espadrilles/PRDO"VRC5447/C5447.jsp Details: Description| Value ---|--- Patched:| Yes, at 07.11.2016 Latest check for patch:| 07.11.2016 04:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1611 Googl...

krakvet.pl XSS vulnerability

Open Bug Bounty ID: OBB-73094 Description| Value ---|--- Affected Website:| krakvet.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...