CVE-2017-14524

Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a 1 URL in the startat parameter to xda/help/en/default.htm or 2 /%09/ slash encoded horizontal tab slash...

Sitefinity CMS 9.2 - Cross-Site Scripting Vulnerability

Exploit for asp platform in category web applications Exploit Title: Stored Cross Site Scripting XSS in Progress Sitefinity CMS 9.2 Date: Aug 31, 2017 Exploit Author: Pralhad Chaskar Vendor Homepage: http://www.sitefinity.com/ Tested on: Progress Sitefinity CMS 9.2 and lower CVE : NA Vendor...

Stored Cross-Site Scripting Vulnerability in Music Gang App

Music Help is a music education app. Music Help APP has a stored cross-site scripting vulnerability, which can be exploited by an attacker to insert malicious xss cross-site code and obtain sensitive information such as administrator cookies...

Python Network Hacking Toolkit: Habu

These are basic functions that help with some tasks for Ethical Hacking and Penetration Testing. Much of the functions are really basic like get our public IP address, but are really useful in some cases. Installation To install Habu, simply: $ pip install habu Dependencies Habu requires: Click...

PT-2017-7909

Name of the Vulnerable Software and Affected Versions Twitter iOS client versions 6.62 through 6.62.1 Description The issue allows man-in-the-middle attackers to view an application-only OAuth client token by exploiting the failure to validate Twitter's server certificates for the...

Cross-site scripting vulnerability in S-CMS /admin/help.asp page

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A cross-site scripting vulnerability exists in the /admin/help.asp page in S-CMS v3.0 build20170911. Allows an attacker to construct XSS statements and perform pop-up box operations to obtain sensitive...

360.io XSS vulnerability

Vulnerable URL: https://360.io/help/myaccount/!prettyPhoto/x,%3Csvg/onload=alert%27openbugbounty%27%3E/x Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 636457 VIP website status:| ...

CVE-2015-2210

The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to create a button that spawns a command shell...

CVE-2015-2210

The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to create a button that spawns a command shell...

CVE-2015-2210: Improper Neutralization of Special Elements used in a Command

The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to create a button that spawns a command shell...

PT-2017-6558

Name of the Vulnerable Software and Affected Versions Epicor CRS Retail Store versions prior to 3.2.03.01.008 Description The issue allows local users to execute arbitrary code by injecting Javascript into the help window source, enabling the creation of a button that spawns a command shell...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 61 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 61.0.3163.79 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

Sitefinity CMS 9.2 - Cross-Site Scripting

Sitefinity CMS 9.2 - Cross-Site Scripting Exploit Title: Stored Cross Site Scripting XSS in Progress Sitefinity CMS 9.2 Date: Aug 31, 2017 Exploit Author: Pralhad Chaskar Vendor Homepage: http://www.sitefinity.com/ Tested on: Progress Sitefinity CMS 9.2 and lower CVE : NA Vendor Description...

Sitefinity CMS 9.2 - Cross-Site Scripting

Exploit Title: Stored Cross Site Scripting XSS in Progress Sitefinity CMS 9.2 Date: Aug 31, 2017 Exploit Author: Pralhad Chaskar Vendor Homepage: http://www.sitefinity.com/ Tested on: Progress Sitefinity CMS 9.2 and lower CVE : NA Vendor Description ------------------ Progress® Sitefinity™ is a...

MGASA-2017-0285 Updated fossil package fixes security vulnerability

Potential XSS vulnerability on the /help webpage boo1053267...

Updated fossil package fixes security vulnerability

Potential XSS vulnerability on the /help webpage boo1053267...

PT-2017-19434

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A potential XSS issue is identified on the /help webpage. Recommendations At the moment, there is no information about a newer version that contains a fix for this issue...

SQL Injection Vulnerability in Xiaowei OA System of Beijing Xiaowei Help Technology Co.

Xiaowei OA system is Beijing Xiaowei Help Technology Co., Ltd. to provide mobile office platform for small and medium-sized enterprises. Ltd. SQL injection vulnerability exists in the small micro OA system, an attacker can use the vulnerability to obtain sensitive information in the database...

USN-3393-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain e-mail messages. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. CVE-2017-6418 It was discovered that ClamAV incorrectly handled certain malformed CHM files. A remote...

Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: August 8, 2017

Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: August 8, 2017 Summary An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. To learn more about the vulnerability, ...