703 matches found
mc-haciendadelpueblo.org XSS vulnerability
Vulnerable URL: http://www.mc-haciendadelpueblo.org/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...
MineCam MC Photo Editor - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application MineCam MC Photo Editor published at the 'play' market has multiple vulnerabilities...
MC Retail - GPL license, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application MC Retail published at the 'play' market has multiple vulnerabilities...
Cisco FireSIGHT Management Center DOM-Based Cross-Site Scripting Vulnerability
Cisco FireSIGHT Management Center MC contains a DOM-based cross-site scripting vulnerability XSS in the management page. An unauthenticated, remote attacker could persuade a user to perform a malicious action, allowing the attacker to perform a XSS attack. The vulnerability is due to mishandling ...
oswellmeter.w12.mc-test.com XSS vulnerability
Open Bug Bounty ID: OBB-109987 Description| Value ---|--- Affected Website:| oswellmeter.w12.mc-test.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...
CVE-2015-6357
Cisco FireSIGHT Management Center (MC) versions 5.2–5.4.0.1 are affected by CVE-2015-6357 due to the rule-update feature not verifying the X.509 certificate of the support.sourcefire.com SSL server. This enables a man-in-the-middle attacker to spoof the server and deliver an invalid package, pote...
CVE-2015-6363
Cisco FireSight Management Center Web Framework Cross-Site Scripting Vulnerability (CVE-2015-6363) affects MC 5.4.1.4 and 6.0.1. The root cause is improper sanitization of parameter values in the web framework, allowing an authenticated remote attacker to inject arbitrary script/HTML via unspecif...
MC Inventory Manager SQL Injection
Vulnerability title: MC Inventory Manager Authentication Bypass Exploit Author : Ashiyane Digital Security Team Product: MC Inventory Manager Date: 2015.10.13 Vendor Homepage: http://microcode.ws/inventory-manager.php Introduction: ============= Manage and maintain inventory of your company, item...
mc-n.ru XSS vulnerability
Open Bug Bounty ID: OBB-69463 Description| Value ---|--- Affected Website:| mc-n.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities exist in the mc-4.5.51 package of the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Mitsubishi MCWorkX ActiveX Control File Execution Command Execution - Ver2 (CVE-2013-2817)
A command execution vulnerability has been reported in Mitsubishielectric Mc-worx Suite. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Mitsubishi Electric Automation MC-WorX Suite Unsecure ActiveX Control
OVERVIEW This advisory is a follow-up to the original alert, titled ICS-ALERT-13-259-01 Mitsubishi MC-WorX Suite Unsecure ActiveX Control,ICS-ALERT-13-259-01 Mitsubishi MC-WorkX Suite Insecure ActiveX Control, http://ics-cert.us-cert.gov/alerts/ICS-ALERT-13-259-01, web site last accessed February...
Joomla Component (com_beamospetition) SQL Injection Vulnerability
No description provided by source. Exploit Title : Joomla combeamospetition Sql Injection Vulnerability Date : 29 - 7 - 2010 Author : Forza-Dz Vendor : http://code.joomla.org/gf/project/beamospetition/frs/ Version : All Versions Tested on : Win Sp2 and Mc Dork = inurl:combeamospetition --- SQL...
Mitsubishi MC-WorkX 8.02 ActiveX Control (IcoLaunch) File Execution
No description provided by source. html object classid='clsid:C28A127E-4A85-11D3-A5FF-00A0249E352D' id='target'/object !-- Mitsubishi MC-WorkX Suite Insecure ActiveX Control - IcoLaunch.dll Vendor: http://www.meau.com Version: MC-WorkX 8.02 Tested on: Windows XP SP3 / IE 6 Download:...
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_INITIALIZE Buffer Overflow
No description provided by source. $Id: realwinscpcinitialize.rb 11180 2010-11-30 20:19:18Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An...
MailEnable IMAPD W3C Logging Buffer Overflow
No description provided by source. $Id: mailenablew3cselect.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
SnackAmp 3.1.2 - SMP Buffer Overflow Vulnerability (SEH)
No description provided by source. Exploit Title: SnackAmp 3.1.2 Malicious SMP Buffer Overflow Vulnerability SEH Date: 08/28/10 Author: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/snackamp/ Version: 3.1.2 Tested on: Windows XP SP3 EN CVE: N/A Shoutz to MC,...
Aruba MC-800 Mobility Controller Screens Directory HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26465/info Aruba MC-800 Mobility Controller is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and...
