CVE-2018-11932

creationtimestamp| type| source ---|---|--- 2019-02-26 00:58:16+00:00| seen| https://t.me/cibsecurity/2719...

CVE-2018-11935

creationtimestamp| type| source ---|---|--- 2019-02-26 00:58:15+00:00| seen| https://t.me/cibsecurity/2718...

Xiaomi perseus-p-oss MIX 3 integer overflow vulnerability

Xiaomi perseus-p-oss MIX 3 is a smartphone from Chinese company Xiaomi Technology Xiaomi. Xiaomi perseus-p-oss MIX 3 An integer overflow vulnerability exists in the sdeevtlogfilterwrite method of the drivers/gpu/drm/msm/sdedbg.c file in the Xiaomi perseus-p-oss MIX 3 on 2018-11-26 and earlier...

MatrixSSL 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates

MatrixSSL 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates I happened to notice that a public X.509 certificate testcase for CVE-2014-1569 caused a stack buffer overflow in MatrixSSL. I cleaned up the testcase a bit, to make a better demonstration. You can test it with the certValidate...

Cisco RV300 / RV320 - Information Disclosure

Exploit Title: 6coRV Exploit Date: 01-26-2018 Exploit Author: Harom Ramos Horus Tested on: Cisco RV300/RV320 CVE : CVE-2019-1653 import requests from requests.packages.urllib3.exceptions import InsecureRequestWarning from fakeuseragent import UserAgent def randomheaders: return dict'user-agent':...

assofond.it XSS vulnerability

Open Bug Bounty ID: OBB-714596 Description| Value ---|--- Affected Website:| assofond.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

rfppl.co.in XSS vulnerability

Open Bug Bounty ID: OBB-714539 Description| Value ---|--- Affected Website:| rfppl.co.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

archtour.at XSS vulnerability

Open Bug Bounty ID: OBB-714503 Description| Value ---|--- Affected Website:| archtour.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

youpharmacy.gr XSS vulnerability

Open Bug Bounty ID: OBB-714401 Description| Value ---|--- Affected Website:| youpharmacy.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Joomla! JE Photo Gallery 1.1 SQL Injection

Exploit Title: Joomla! Component JE Photo Gallery 1.1 - SQL Injection Dork: N/A Date: 2018-11-26 Exploit Author: Ihsan Sencan Vendor Homepage: https://joomlaextensions.co.in Software Link: http://joomlaextensions.co.in/download/1387375463JE%20PhotoGallery%20%20J-%203.0%20.zip Version: 1.1 Categor...

you18.org XSS vulnerability

Open Bug Bounty ID: OBB-704622 Description| Value ---|--- Affected Website:| you18.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

saspreview.com XSS vulnerability

Open Bug Bounty ID: OBB-704564 Description| Value ---|--- Affected Website:| saspreview.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

handbal.be XSS vulnerability

Open Bug Bounty ID: OBB-703352 Description| Value ---|--- Affected Website:| handbal.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

spa-design.it XSS vulnerability

Open Bug Bounty ID: OBB-703298 Description| Value ---|--- Affected Website:| spa-design.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

madreshoy.com XSS vulnerability

Open Bug Bounty ID: OBB-703149 Description| Value ---|--- Affected Website:| madreshoy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

itis.ua XSS vulnerability

Open Bug Bounty ID: OBB-703146 Description| Value ---|--- Affected Website:| itis.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

bag1t.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-702953 Description| Value ---|--- Affected Website:| bag1t.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

mangaloreuniversity.ac.in XSS vulnerability

Open Bug Bounty ID: OBB-702354 Description| Value ---|--- Affected Website:| mangaloreuniversity.ac.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score...

CVE-2018-19186

The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter...

PAYFORT payfort-php-SDK cross-site scripting vulnerability (CNVD-2019-08572)

PayFort is an online payment gateway. payfort-php-SDK is the PayFort payment gateway SDK. A cross-site scripting vulnerability exists in Amazon PAYFORT payfort-php-SDK on 2018-04-26 and earlier versions, which can be exploited by an attacker via the success.php fortid parameter to conduct a...