Scientific Linux Security Update : keepalived on SL7.x x86_64 (20190806)

Security Fixes : - keepalived: Improper pathname validation allows for overwrite of arbitrary filenames via symlinks CVE-2018-19044 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128225; scriptversion"1.6";...

miracal.ru XSS vulnerability

Open Bug Bounty ID: OBB-649814 Description| Value ---|--- Affected Website:| miracal.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

demonstrativo.lecom.com.br XSS vulnerability

Open Bug Bounty ID: OBB-636872 Description| Value ---|--- Affected Website:| demonstrativo.lecom.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sistemas.tjes.jus.br XSS vulnerability

Open Bug Bounty ID: OBB-632202 Description| Value ---|--- Affected Website:| sistemas.tjes.jus.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

institutomarcosdoria.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-601550 Description| Value ---|--- Affected Website:| institutomarcosdoria.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

CVE-2017-12912

The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violation when opening a crafted MP3 file...

JVN#50197114: smalruby-editor vulnerable to OS command injection

smalruby-editor provided by Ruby Programming Shounendan is web-based editor to create Ruby programs. smalruby-editor containts an OS command injection vulnerability CWE-78. Impact A remote attacker may execute arbitrary OS command on the server where smalruby-editor resides. Solution Update the...

theshopsatcolumbuscircle.com XSS vulnerability

Vulnerable URL: http://www.theshopsatcolumbuscircle.com/?s=%22%3E%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 747163 VIP websi...

CVE-2016-10009

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11 modules by leveraging control over a forwarded agent-socket...

flowerdelivery.com XSS vulnerability

Vulnerable URL: http://www.flowerdelivery.com/flowers/list.asp?price=1%22--%3E%3Csvg/onload%3D%3Bprompt/OPENBUGBOUNTY/%3B%3E10%3A49.99=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

hughescrownhill.com XSS vulnerability

Vulnerable URL: http://www.hughescrownhill.com/runtime.php?NavigatorId=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9370552 VIP website status:| No Check...

rackittechnology.com XSS vulnerability

Vulnerable URL: https://www.rackittechnology.com/shopping/passwordforgotten.php?emailaddress=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

investonsite.com XSS vulnerability

Vulnerable URL: http://www.investonsite.com/monitors/mb.php?domain=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

VFront 0.99.2 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

Exploit Title: CSRF & Persistent XSS Google Dork: intitle: CSRF & Persistent XSS Date: 2015-06-02 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org/ Vendor Homepage: www.vfront.org Software Link: www.vfront.org Version: 0.99.2 Tested on: windows 7 Category: webapps Product:...

CVE-2014-9274

UnRTF allows remote attackers to cause a denial of service crash and possibly execute arbitrary code as demonstrated by a file containing the string "\cb-999999999"...

CVE-2012-6059

The dissectisakmp function in epan/dissectors/packet-isakmp.c in the ISAKMP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data structure to determine IKEv2 decryption parameters, which allows remote attackers to cause a denial of service application crash via...

Unfixed XSS vulnerability at www.economiadehoy.com

Security researcher AR3SW0RMED, has submitted on 30/06/2011 a cross-site-scripting XSS vulnerability affecting www.economiadehoy.com, which at the time of submission ranked 1147091 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It ...

FreeNAS Remote Shell Command Execution Vulnerability

FreeNAS is prone to a shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit the remote shell-command-execution issue to execute arbitrary shell commands in the context of the webserver process. FreeNAS versions prior ...

Skype Extras Manager (skypePM.exe) skype-plugin: URI Arbitrary XML File Deletion (credentialed check)

According to its timestamp, the version of Skype installed on the remote host likely includes a version of the Skype Extras Manager skypePM.exe that has a flaw in its handling of the 'skype-plugin:' protocol. If an attacker can trick a user on the affected system into clicking on a specially...

Script (articulos.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== Script articulos.php SQL Injection Vulnerability ================================================== Date: 20-6-2010 Author: CaSpErHaK Tested on: linux // =============================founded B...