4699 matches found
CVE-2015-8032
CVE-2015-8032 affects Textpattern 4.5.7. The vulnerability allows an unprivileged author to change an article's markup setting, indicating a permission/ownership flaw in how article markup is managed. The provided sources do not specify an exploit method or a patch/mitigation. The impact is limit...
CVE-2015-8032
In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...
PT-2020-7903
Name of the Vulnerable Software and Affected Versions: Textpattern version 4.5.7 Description: The issue allows an unprivileged author to change an article's markup setting. Recommendations: For Textpattern version 4.5.7, at the moment, there is no information about a newer version that contains a...
CVE-2015-8032: Improper Privilege Management
In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...
Mail.ru: Stored XSS in address on [corporate.city-mobil.ru]
Stored XSS in address setting functionality on corporate.city-mobil.ru...
FAQ: Where is the setting to enable multiple monitors?
Q:Where is the setting to enable multiple monitors? A : To enable multiple monitors edit the web.config file in the StoreWeb -directory on the StoreFront server. The default location isc:\inetpub\wwwroot\citrix\Storeweb. In the web.config file, change showDesktopViewer=true to...
CVE-2020-15632
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HNAP GetCAPTCHAsetting requests. The issue...
cxf: OpenId Connect token service does not properly validate the clientId
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore JKS/PKCS12 by specifing the...
DuckDuckGo: DOM XSS on duckduckgo.com search
Hey there, there is a DOM XXS vulnerability on the https://duckduckgo.com/ search result page through the kp and kae parameters of the Cloud Save feature. POC URL:...
CVE-2020-15082 External control of configuration setting in the dashboard in PrestaShop
In PrestaShop from version 1.6.0.1 and before version 1.7.6.6, the dashboard allows rewriting all configuration variables. The problem is fixed in 1.7.6.6...
CVE-2020-14055
Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding...
CVE-2020-14055
Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding...
Cross site scripting
Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding...
CVE-2020-14055
Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding...
PT-2020-13866
Name of the Vulnerable Software and Affected Versions Monsta FTP versions 2.10.1 and below Description The issue is related to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding. Recommendations For Monsta FTP versions 2.10.1 and below, update ...
CVE-2020-14055: Improper Neutralization of Input During Web Page Generation
Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding...
CVE-2020-14950: Improper Neutralization of Special Elements used in an OS Command
aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request start, stop, or restart to the setting menu of Sotfware Store...
CVE-2016-11073
An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting...