Fortinet FortiOS 5.4.x < 5.4.6 Denial of Service (FG-IR-17-206)

The version of Fortinet FortiOS running on the remote device is 5.4 prior to 5.4.6. It is, therefore, affected by a Denial of Service DoS vulnerability in the FortiOS webUI. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104352; scriptversion"1.7";...

Advantech WebAccess Webvrpcs Service Opcode 80061 Stack Buffer Overflow

This module exploits a stack buffer overflow in Advantech WebAccess 8.2. By sending a specially crafted DCERPC request, an attacker could overflow the buffer and execute arbitrary code. Module Options msf use exploit/windows/scada/advantech/webaccesswebvrpcsbof msf undefinedwebaccesswebvrpcsbof...

FS Lynda Clone - category SQL Injection

FS Lynda Clone - category SQL Injection Exploit Title: FS Lynda Clone - SQL Injection Date: 2017-10-23 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/lynda-clone/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Mac OS...

inbira.com XSS vulnerability

Vulnerable URL: http://www.inbira.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17748226 VIP...

centraldetasacion.es XSS vulnerability

Vulnerable URL: http://www.centraldetasacion.es/index.php/anuncios/filtrardetallado Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

anton-nieuwenhuizen.net XSS vulnerability

Vulnerable URL: https://www.anton-nieuwenhuizen.net/browsemedia.php?mediasearch=bug=headstones=Relatives=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:|...

Sql injection

SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php...

baker1865.com XSS vulnerability

Open Bug Bounty ID: OBB-340998 Description| Value ---|--- Affected Website:| baker1865.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

omicsonline.org XSS vulnerability

Vulnerable URL: https://www.omicsonline.org/searchresult.php?keyword='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10802 VIP website status:| Yes Coordinated Disclosure Timelin...

documentabalear.cat XSS vulnerability

Vulnerable URL: http://www.documentabalear.cat/cataleg.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14246855 VIP website status:| No Coordinated Disclosure Timeline:...

fnp.co.ae XSS vulnerability

Vulnerable URL: http://fnp.co.ae/search.php?pageid=1%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19503667 VIP website status:| No...

lavocedellevoci.it Open Redirect vulnerability

Vulnerable URL: http://www.lavocedellevoci.it/?adsclick=1=5996-1396-0-1395-3=1763ac7726=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

keisari.dk Open Redirect vulnerability

Vulnerable URL: http://keisari.dk/v1.0/keisari/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa...

jvcmusic.co.jp Open Redirect vulnerability

Vulnerable URL: http://www.jvcmusic.co.jp/quruli/superstar/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

laboutiquedelfiore.rm.it Open Redirect vulnerability

Vulnerable URL: http://www.laboutiquedelfiore.rm.it/album-lavorazioni/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:|...

create-a-scholar.net Open Redirect vulnerability

Vulnerable URL: http://create-a-scholar.net/flash/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

luthardt.net Open Redirect vulnerability

Vulnerable URL: http://www.luthardt.net/Touren/ArrasDakar2002/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

CVE-2017-14925

Cross-Site Request Forgery CSRF vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to edit global permissions if an administrator opens a wiki page with an IMG element, related to...

LAquis SCADA 4.1.0.2385 - Directory Traversal Exploit

Exploit for multiple platform in category remote exploits require 'msf/core' class MetasploitModule 'LAquis SCADA Web Server Directory Traversal Information Disclosure', 'Description' = %q This module exploits a directory traversal vulnerability found in the LAquis SCADA application. The...

audibkk.de XSS vulnerability

Vulnerable URL: https://www.audibkk.de/suche/?q=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E\n Details: Description| Value ---|--- Patched:| Yes, at 17.01.2018 Latest check for patch:| 17.01.2018 12:04 GMT Vulnerability type:| XSS Vulnerability status:| Public...