PT-2018-14220 · Google · X/Net/Html

Name of the Vulnerable Software and Affected Versions: html package aka x/net/html versions through 2018-09-25 Description: The issue arises from the html package mishandling certain HTML tags, such as and , leading to a "panic: runtime error" index out of range during an html.Parse call. This...

capterra.com XSS vulnerability

Open Bug Bounty ID: OBB-680220 Description| Value ---|--- Affected Website:| capterra.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-17314

creationtimestamp| type| source ---|---|--- 2018-09-25 14:35:25+00:00| seen| https://t.me/VulnerabilityNews/1842...

CVE-2018-17378

creationtimestamp| type| source ---|---|--- 2018-09-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45466...

CVE-2018-14327

creationtimestamp| type| source ---|---|--- 2018-09-22 23:09:12+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4429 2018-09-25 13:40:11+00:00| seen| https://t.me/VulnerabilityNews/1833...

Design/Logic Flaw

BlogCMS through 2016-10-25 has XSS via a comment...

25-music.de XSS vulnerability

Open Bug Bounty ID: OBB-672756 Description| Value ---|--- Affected Website:| 25-music.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

libfsclfs Denial of Service Vulnerability

libfsclfs is a library and tool for accessing the Common Log File System CLFS. A denial-of-service vulnerability exists in the 'libfsclfsblockread' function of the libfsclfsblock.c file in libfsclfs 2018-07-25 and earlier versions, which can be exploited by a remote attacker with the help of a...

PT-2018-12912 · Github · Libfsclfs

Name of the Vulnerable Software and Affected Versions: libfsclfs versions prior to 2018-07-25 Description: The issue allows remote attackers to cause a heap-based buffer over-read via a crafted clfs file. This is due to a problem in the libfsclfs block read function in libfsclfs block.c. The vend...

staff-online.ru XSS vulnerability

Open Bug Bounty ID: OBB-669423 Description| Value ---|--- Affected Website:| staff-online.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ww2.watch-series.co XSS vulnerability

Open Bug Bounty ID: OBB-669147 Description| Value ---|--- Affected Website:| ww2.watch-series.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fr.solutions.kompass.com XSS vulnerability

Open Bug Bounty ID: OBB-669111 Description| Value ---|--- Affected Website:| fr.solutions.kompass.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dlword.press XSS vulnerability

Open Bug Bounty ID: OBB-669096 Description| Value ---|--- Affected Website:| dlword.press Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

at.kompass.com XSS vulnerability

Open Bug Bounty ID: OBB-669013 Description| Value ---|--- Affected Website:| at.kompass.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the microprogrammed software of the 4G LTE Light Industrial M2M Router NWL-25 is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

flash-plugin: Information Disclosure vulnerabilities (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

NetComm NWL-25 Cross-Site Request Forgery Vulnerability

The NetComm NWL-25 is a 4G LTE industrial grade M2M router. A cross-site request forgery vulnerability exists in the NetComm NWL-25 using firmware version 2.0.29.11 and earlier, which can be exploited by an attacker to remotely change the password of the device...

NetComm NWL-25 Information Disclosure Vulnerability

The NetComm NWL-25 is a 4G LTE industrial grade M2M router. An information disclosure vulnerability exists in the NetComm NWL-25 using firmware version 2.0.29.11 and earlier, which can be exploited by an attacker to access configuration files without authentication...

NetComm NWL-25 Device Directory Disclosure Vulnerability

The NetComm NWL-25 is a 4G LTE industrial grade M2M router. A device catalog disclosure vulnerability exists in the NetComm NWL-25 using firmware version 2.0.29.11 and earlier, which can be exploited by an attacker to obtain the device's catalog...

CVE-2018-14783

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. A cross-site request forgery condition can occur, allowing an attacker to change passwords of the device remotely...