Security Advisories | darksecurity.de

SSCHADV2014-004 - reg.ebay.com - Cross-site Scripting vulnerability

Posted by Stefan Schurtz on Monday, May 26. 2014

^Advisory:	reg.ebay.com – Cross-site Scripting vulnerability
Advisory ID:	SSCHADV2014-004
Author:	Stefan Schurtz
Affected Software:	Successfully tested on reg.ebay.com
Vendor URL:	http://www.ebay.com/
Vendor Status:	informed

======================
Vulnerability Description
======================

The website reg.ebay.com is prone to a cross-site Scripting vulnerability

Posted by Stefan Schurtz on Saturday, May 24. 2014

^Advisory:	ocsnext.ebay.com – Open Redirect
Advisory ID:	SSCHADV2014-005
Author:	Stefan Schurtz
Affected Software:	Successfully tested on ocsnext.ebay.com
Vendor URL:	http://www.ebay.com/
Vendor Status:	fixed

======================
Vulnerability Description
======================

The website "ocsnext.ebay.com" is prone to open redirect with a special provided url

Posted by Stefan Schurtz on Thursday, February 6. 2014

^Advisory:	Serendipity 1.7.5 (Backend) – Multiple security vulnerabilities
Advisory ID:	SSCHADV2014-003
Author:	Stefan Schurtz
Affected Software:	Successfully tested on Serendipity 1.7.5
Vendor URL:	http://www.s9y.org/
Vendor Status:	fixed

======================
Vulnerability Description
======================

The Serendipity 1.7.5 backend is prone to multiple security vulnerabilities

Posted by Stefan Schurtz on Saturday, January 25. 2014

^Advisory:	ssl.bing.com – Cross-site Scripting vulnerability
Advisory ID:	SSCHADV2013-012
Author:	Stefan Schurtz
Affected Software:	Successfully tested on ssl.bing.com
Vendor URL:	http://microsoft.com
Vendor Status:	fixed

======================
Vulnerability Description
======================

The website ‘ssl.bing.com’ is prone to a Cross-site Scripting vulnerability

Posted by Stefan Schurtz on Wednesday, January 8. 2014

^Advisory:	Wordpress Plugin WP-Members 2.8.9 – Multiple Cross-site Scripting vulnerabilities
Advisory ID:	SSCHADV2014-001
Author:	Stefan Schurtz
Affected Software:	Successfully tested on WP-Members Version 2.8.9
Vendor URL:	http://wordpress.org/plugins/wp-members/
Vendor Status:	fixed

======================
Vulnerability Description
======================

The Wordpress plugin "WP-Members 2.8.9" is prone to reflected and stored XSS vulnerabilities

Posted by on Sunday, December 8. 2013

Advisory:	developer.mozilla.org - DOM based Cross-site Scripting vulnerability
Advisory ID:	SSCHADV2013-010
Author:	Stefan Schurtz
Affected Software:	Successfully tested on developer.mozilla.org
Vendor URL:	http://developer.mozilla.org
Vendor Status:	fixed

==========================
Vulnerability Description
==========================

The website 'developer.mozilla.org' is prone to a DOM based XSS vulnerability