Cross site scripting

A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 2018.2.3...

Design/Logic Flaw

A possible stored JavaScript injection requiring a deliberate server administrator action was detected. The issue was fixed in JetBrains TeamCity 2018.2.3...

CVE-2019-12843

A possible stored JavaScript injection requiring a deliberate server administrator action was detected. The issue was fixed in JetBrains TeamCity 2018.2.3...

CVE-2019-12843

CVE-2019-12843 is a stored JavaScript injection vulnerability in JetBrains TeamCity that requires deliberate server administrator action to trigger. The issue was fixed in TeamCity 2018.2.3. Connected sources confirm the vulnerability and the remediation, but do not provide additional exploit det...

CVE-2019-12844

A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 2018.2.3...

CVE-2019-12844

CVE-2019-12844 corresponds to a stored JavaScript injection on JetBrains TeamCity pages. Multiple sources confirm the vulnerability exists in TeamCity and was fixed in TeamCity 2018.2.3. Connected records (NVD, Red Hat, CNVD, CVE list, and JetBrains security bulletin) consistently describe a stor...

CVE-2019-12844: Improper Control of Generation of Code

A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 2018.2.3...

CVE-2019-12843: Improper Control of Generation of Code

A possible stored JavaScript injection requiring a deliberate server administrator action was detected. The issue was fixed in JetBrains TeamCity 2018.2.3...

OLX: Reflected XSS on www.olx.co.id via ad_type parameter

I have identified a Reflected Cross Site Scripting XSS vulnerability on the www.olx.co.id website. Vulnerable URL: https://www.olx.co.id/iklan/sony-xz-ram-3gb-32gb-finger-mulus-preisure-naik-test-air-disini-IDA2UED.html?adtype=OR"/alert"XSS" Vulnerable Parameter: skeyword XSS Payload:...

CVE-2019-1577

Code injection vulnerability in Palo Alto Networks Traps 5.0.5 and earlier may allow an authenticated attacker to inject arbitrary JavaScript or HTML...

PowerPanel Business Edition 3.4.0 Cross Site Scripting

Exploit Title: PowerPanel Business Edition - Stored Cross Site Scripting SNMP trap receivers Google Dork: None Date: 6/29/2019 Exploit Author: Joey Lane Vendor Homepage: https://www.cyberpowersystems.com Software Link: https://dl4jz3rbrsfum.cloudfront.net/software/ppbe340-linux-x8664.sh Version:...

IBM Rational Collaborative Lifecycle Management Cross-Site Scripting Vulnerability (CNVD-2019-21081)

IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines three products, RTC, RQM, and RRC, in a single IBM SmartCloud Enterprise cloud environment image to provide requirements management,...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2019-20857)

IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines three products, RTC, RQM, and RRC, in a single IBM SmartCloud Enterprise cloud environment image to provide requirements management,...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2019-20850)

IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines three products, RTC, RQM, and RRC, in a single IBM SmartCloud Enterprise cloud environment image to provide requirements management,...

PT-2019-2816

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Traps versions 5.0.5 and earlier Description The issue is related to incorrect code generation management in Palo Alto Networks Traps, which may allow an authenticated attacker to inject arbitrary JavaScript or HTML. This...

PT-2019-9569 · Ibm · Ibm Rational Collaborative Lifecycle Management

Name of the Vulnerable Software and Affected Versions: IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

IBM Security Access Manager Appliance Cross-Site Scripting Vulnerability

IBM Security Access Manager Appliance ISAM Appliance is a network appliance-based security solution from IBM, USA. The product is mainly used for access control and Web-based threat protection, providing system performance monitoring, log analysis and diagnosis. A cross-site scripting vulnerabili...

PT-2019-12983

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2018.2.3 Description A possible stored JavaScript injection issue was detected on one of the JetBrains TeamCity pages. Recommendations For versions prior to 2018.2.3, update to version 2018.2.3 or later to...

CVE-2019-19908

phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmcusername parameter to passreset.php is vulnerable. Recent assessments: cinzinga at March 09, 2020 9:23pm UTC reported: I am the founder of this exploit. Google dorking...

PT-2019-12982

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2018.2.3 Description A possible stored JavaScript injection was detected, requiring a deliberate server administrator action. Recommendations For versions prior to 2018.2.3, update to version 2018.2.3 or...