PT-2017-12104

Name of the Vulnerable Software and Affected Versions Mongoose Web Server versions prior to 6.9 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that modify Mongoose.conf via a request to " mg admin?save". This can be leveraged...

PT-2017-13223

Name of the Vulnerable Software and Affected Versions BlackCat CMS version 1.2 Description The issue allows remote authenticated users to conduct cross-site scripting XSS attacks. This can be achieved via the Website header or Website footer field in the backend/settings/ajax save settings.php...

ncurses denial of service vulnerability (CNVD-2017-25655)

ncurses new curses is a library of programs that provides APIs that allow programmers to write text-based user interfaces that are independent of the terminal. A denial of service vulnerability exists in the ncsavestr function in allocentry.c in Ncurses, which can be exploited by a remote attacke...

PT-2017-13050

Name of the Vulnerable Software and Affected Versions ncurses version 6.0 Description The issue is related to an illegal address access in the nc save str function in alloc entry.c. This can lead to a remote denial of service attack. Recommendations For ncurses version 6.0, update to a version th...

zzcms8. 1 Background save ad add storage type xss

No description provided by source...

Disk Savvy Enterprise 9.9.14 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python Exploit Title: Disk Savvy Enterprise 9.9.14 Remote SEH Buffer Overflow Date: 2017-08-25 Exploit Author: Nipun Jaswal & Anurag Srivastava Author Homepage: www.pyramidcyber.com Vendor Homepage: http://www.disksavvy.com...

PT-2017-4142

Name of the Vulnerable Software and Affected Versions libexif versions 0.6.21 and earlier Description The issue is related to an out-of-bounds heap read in the exif data save data entry function in libexif/exif-data.c, caused by improper length computation of the allocated data of an ExifMnote...

save-wildlife.org XSS vulnerability

Vulnerable URL: https://www.save-wildlife.org/de/kontakt Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2463037 VIP website status:| No Check...

WebsiteBaker Arbitrary PHP Code Execution Vulnerability

WebsiteBaker is an open source PHP content management system CMS maintained and developed by the WebsiteBaker organization. The system supports WYSIWYG editor, search engine optimization and add-ons. A security vulnerability exists in the install\save.php file in WebsiteBaker version 2.10.0. The...

CVE-2017-9771

install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the databaseusername, databasehost, or databasepassword parameter...

Fastspot BigTree 'admin.php' File Denial of Service Vulnerability

Fastspot BigTree is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A security vulnerability exists in the admin.php file in Fastspot BigTree 4.2.18 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of...

123ContactForm - Cross Site Scripting Web Vulnerability

Document Title: =============== 123ContactForm - Cross Site Scripting Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1982 Ref: 123-1476631846 Release Date: ============= 2017-06-12 Vulnerability Laboratory ID VL-ID:...

CVE-2017-9448

Cross-site scripting XSS vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbitrary web script or HTML via the description parameter. This issue exists in core\admin\ajax\pages\save-revision.php and core\admin\modules\pages\revisions.php. Low-privileged...

CVE-2017-9448: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbitrary web script or HTML via the description parameter. This issue exists in core\admin\ajax\pages\save-revision.php and core\admin\modules\pages\revisions.php. Low-privileged...

CVE-2017-9337

The Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the content of a post...

Cross site scripting

The Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the content of a post...

asc-connections.com XSS vulnerability

Vulnerable URL: https://asc-connections.com/register-with-save-search?keywords="'--!confirmOPENBUGBOUNTY//...

CVE-2017-9337: Improper Neutralization of Input During Web Page Generation

The Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the content of a post...

PT-2017-18852

Name of the Vulnerable Software and Affected Versions Markdown on Save Improved plugin version 2.5 for WordPress Description The issue is related to a stored XSS vulnerability in the content of a post. Recommendations For Markdown on Save Improved plugin version 2.5, update to a newer version tha...

WordPress Markdown on Save Improved Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.Markdown on Save Improved is one of the editor plugin. A cross-site scripting vulnerability exists in the posting...