mitesla.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1097562 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting mitesla.com website and i...

CVE-2019-5930

CVE-2019-5930 affects Cybozu Garoon 4.0.0–4.6.3. Root cause: bypass of access restrictions in the Management of Basic System, enabling remote attackers to browse unauthorized pages. Impact: unauthorized page access due to broken access control. Exploitation details are not provided beyond the des...

DEBIAN-CVE-2017-5930

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check...

CVE-2017-5930

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check...

CVE-2017-5930

The CVE-2017-5930 issue affects PostfixAdmin's AliasHandler. The AliasHandler component before 3.0.2 permits remote authenticated domain admins to delete protected aliases via delete.php due to a missing permission check, enabling unintended alias deletion. Public sources confirm the fix is to up...

CVE-2017-5930

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check...

CVE-2017-5930

The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

Mageia: Security Advisory (MGASA-2016-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : webkitgtk4-2.10.4-1.fc22 (2016-d132dbb529)

Update to 2.10.4. Major new features: New HTTP disk cache for the Network Process. IndexedDB support. New Web Inspector UI. Automatic ScreenServer inhibition when playing fullscreen videos. Initial Editor API. - Performance improvements. This update addresses the following vulnerabilities:...

CVE-2015-5930

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5930

CVE-2015-5930 concerns WebKit as used in: Apple iOS prior to 9.1, Safari prior to 9.0.1, and iTunes prior to 12.3.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The description i...

KLA10685 Multiple vulnerabilities at Apple iTunes

Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. Multiple memory corruptions at WebKit can be exploited via iTunes Store...

CVE-2014-5930

The CVE-2014-5930 entry concerns the Store and Share Android app (package sg.com.singnet.mystorage.android) version 2.0.18. The underlying issue is that the app does not verify X.509 certificates when communicating with SSL servers, which enables man-in-the-middle attacks to spoof servers and exf...

CVE-2013-5930

CVE-2013-5930 affects the Real Estate PHP Script, specifically the search_residential.php endpoint. It is a cross-site scripting (XSS) vulnerability exploitable via the bos parameter, allowing remote attackers to inject arbitrary scripts/HTML. The NVD entry notes a CVSS v2 base score of 4.3 (Medi...

CVE-2012-5930

The CVE-2012-5930 entry concerns NetIQ Privileged User Manager (PUM) 2.3.x prior to 2.3.1 HF2. The pa_modify_accounts function in auth.dll (unifid.exe) does not require authentication for modifyAccounts, allowing remote attackers to change administrative passwords via a crafted application/x-amf ...

NetIQ Privileged User Manager Password Change Authentication Bypass (version check)

According to the self-reported version of the NetIQ Privileged User Manager 'auth' package, the password for the 'admin' user of the NetIQ Privileged User Manager web application can be modified without authenticating via a specially crafted POST request. Note that Nessus did not check for the...

CVE-2012-5930

creationtimestamp| type| source ---|---|--- 2012-11-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22737...

CVE-2008-5930

The CVE-2008-5930 entry concerns a SQL injection vulnerability in The Net Guys ASPired2Blog, specifically in admin/blog_comments.asp via the BlogID parameter. The underlying flaw enables remote attackers to manipulate the database and execute arbitrary SQL commands. The available documents do not...

CVE-2008-5930

creationtimestamp| type| source ---|---|--- 2008-12-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7436...

CVE-2007-5930

CVE-2007-5930 is a Cross-site scripting (XSS) vulnerability in the Cerberus FTP Server web interface before version 2.46. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to NVD, impact is partial integrity with no confidentiality or avai...