PT-2017-3172 · NetGear · Netgear Wnr2000V5 Router

Name of the Vulnerable Software and Affected Versions: NETGEAR WNR2000v5 Router affected versions not specified Description: The issue is caused by a buffer overflow in the hidden lang avi parameter when invoking the URL "/apply.cgi?/lang check.html". This can be exploited by an unauthenticated...

Lua: Buffer overflow

Background Lua is a powerful, efficient, lightweight, embeddable scripting language. It supports procedural programming, object-oriented programming, functional programming, data-driven programming, and data description. Description A buffer overflow was discovered in the vararg functions in ldo....

XSS Cross-Site Scripting Vulnerability in Apabi Thesis Authorization Submission System of Beijing Founder Apabi Technology Co.

Apabi Thesis Authorization Submission System is a thesis submission system that can be used by college libraries to collect students' theses developed by Beijing Founder Apabi Technology Co. A cross-site scripting vulnerability exists in the Apabi Thesis Authorization Submission System of Beijing...

F3 designs Website SQL Injection Vulnerability

F3 designs is a custom website design and development framework. A SQL injection vulnerability exists in the lang parameter of the index.php page of F3 designs. Because the program fails to adequately filter user-submitted input, an attacker could use this vulnerability to compromise the...

CrossComm SQL Injection Vulnerability

CrossComm is a mobile and web application development studio. An SQL injection vulnerability exists in the lang parameter of CrossComm's index.php page, which can be used by an attacker to take control of the application, access or modify data, or exploit a potential vulnerability in the underlyi...

PHPSYSINFO Local File Disclosure Vulnerability

phpsysinfo is a php script tool software that supports php web server for detecting some information about the host. A local file disclosure vulnerability exists in the lang parameter of the language.php page in PHPSYSINFO version 3.1.12, which can be exploited by attackers to obtain sensitive...

oslo.geodata.es XSS vulnerability

Vulnerable URL: http://oslo.geodata.es/elpraturb/urbanisme.php?lang=es";...

microring.am XSS vulnerability

Vulnerable URL: http://www.microring.am/index.php?lang=arm" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10196302 VIP website status:| No Check microring.am SSL connection:| Grad...

Multi Gigabit Packet Capturing: PFQ

PFQ is a functional networking framework designed for the Linux operating system that allows efficient packets capture/transmission 10G and beyond, in-kernel functional processing and packets steering across sockets/end-points. PFQ is highly optimized for multi-core architecture, as well as for...

DM enterprise built Station system \indexDM_load.php variable lang SQL injection

No description provided by source...

pp-telascica.hr XSS vulnerability

Vulnerable URL: http://pp-telascica.hr/index.php?lang=en'"/alert/openbugbounty/...

Litesploit - Library and Intepreter for Penetration Testing Tools

Litesploit is a library and intepreter for penetration testing tools. This includes exploits, tools and litepreter. Litesploit support for Linux like ubuntu or debian, and more distro penetration testing like BackBox and Kali Linux. Platform | Support ---|--- Linux Ubuntu | Yes Linux Debian | Yes...

WordPress Kento Post View Counter 2.8 Plugin - Cross-Site Request Forgery / Cross-Site Scripting

Exploit for php platform in category web applications I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The combination of CSRF and XSS in this plugin...

Sophos UTM Nessus Web UI Cross-Site Scripting Vulnerability

Sophos UTM is a unified threat management appliance. which provides gateway security and endpoint security. The appliance provides gateway security protection and endpoint security protection.Nessus Web UI is one of the components used to access the Nessus Vulnerability Scanner based on a web...

CVE-2016-2046

Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2016-2046

Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2016-2046

Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2016-2046: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

PT-2016-4987

Name of the Vulnerable Software and Affected Versions SOPHOS UTM versions prior to 9.353 Description A cross-site scripting XSS issue exists in the UserPortal page, allowing remote attackers to inject arbitrary web script or HTML via the lang parameter. This enables attackers to potentially execu...