cushing.med.yale.edu XSS vulnerability

Vulnerable URL: http://cushing.med.yale.edu/cgi-bin/imgview.cgi?col=Yale%20School%20of%20Medicine%20Collection=Jam%3Cscript/%3Ealert'OPENBUGBOUNTY'%3C/script/%3E+%3Ci%3EA%3C/i%3Eb.+Hamiltonℑ=yalebcnt/full/hamiltonjames001.jpg Details: Description| Value ---|--- Patched:| No Latest check for patch...

Yale Home System(Europe) - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yale Home SystemEurope published at the 'play' market has multiple vulnerabilities...

yale.edu XSS vulnerability

Vulnerable URL: http://www.yale.edu/hronline/adminday/SlideShow2010/web/viewer.swf?xmlDataPath=http://45.55.162.179/vuln.xml Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3686 Google Pagerank| 9 VIP website...

yale128036117215.med.yale.edu XSS vulnerability

Vulnerable URL: http://yale128036117215.med.yale.edu/pbio/uncfgdev.html?MACADDRESS=000000000000=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

cld109.eng.yale.edu XSS vulnerability

Vulnerable URL: http://cld109.eng.yale.edu/pbio/uncfgdev.html?MACADDRESS=30055c4d9ff9=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

syllagraphics.yale.edu XSS vulnerability

Vulnerable URL: http://syllagraphics.yale.edu/getSimilars.php?course=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

students.yale.edu XSS vulnerability

Open Bug Bounty ID: OBB-92511 Description| Value ---|--- Affected Website:| students.yale.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

schedule.yale.edu XSS vulnerability

Vulnerable URL: http://schedule.yale.edu/processscheduler.php?mode=cal=457=%22%3E%3Csvg/onload=alert%28/xssposed/%29%3E====1442831612488 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:38 GMT Vulnerability type:| XSS Vulnerability status:|...

arthistory.yale.edu XSS vulnerability

Vulnerable URL: http://arthistory.yale.edu/courses/archivepage.php?PrevYear=2013'"=2014 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4184 Google Pageran...

arthistory.yale.edu XSS vulnerability

Vulnerable URL: http://arthistory.yale.edu/courses/archivepage.php?PrevYear=2013=2014'" Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4184 Google Pageran...

cmi2.yale.edu XSS vulnerability

Vulnerable URL: http://cmi2.yale.edu/phpQ/fillsurvey.php?sid=91" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4184 Google Pagerank| 0 VIP website status:| Yes Check cmi2.yale.edu...

CAS Server 3.5.2 LDAP Authentication Bypass

=====Alligator Security Team - Security Advisory======== CVE-2015-1169 - CAS Server 3.5.2 allows remote attackers to bypass LDAP authentication via crafted wildcards. Reporter: José Tozo =====Table of Contents================================== 1. Background 2. Detailed description 3. Other contex...

NJStar Communicator 3.00 MiniSMTP Buffer Overflow

This module exploits a stack buffer overflow vulnerability in NJStar Communicator Version 3.00 MiniSMTP server. The MiniSMTP application can be seen in multiple NJStar products, and will continue to run in the background even if the software is already shutdown. According to the vendor's...

Sony Hires Ex- Homeland Security Official after PlayStation Hack

Sony Hires Ex- Homeland Security Official after PlayStation Hack Sony has hired a former official at the US Department of Homeland Security for the new post of chief information security officer, months after a massive hacking attack leaked information on 100 million user accounts on its games...

blackboard-xss.txt

//////////////////////////////////////////////////////////////////////////////// //Note: //The full version of this report in pdf format available at my blog: //http://www.secskill.wordpress.com // OR : //http://www.scribd.com/doc/2363025/Blackboard-Academic-Suite-Multiple-XSS-Vulnerabilities-...