Rundeck Community Edition < 3.0.13 - Persistent Cross-Site Scripting

Exploit Title: Rundeck Community Edition before 3.0.13 Multiple Stored XSS Vendor Homepage: https://www.rundeck.com/open-source Software Link: https://docs.rundeck.com/downloads.html Exploit Author: Ishaq Mohammed Contact: https://twitter.com/securityprince Website: https://about.me/security-prin...

Rundeck Community Edition 3.0.13 - Persistent Cross-Site Scripting

Rundeck Community Edition 3.0.13 - Persistent Cross-Site Scripting Exploit Title: Rundeck Community Edition before 3.0.13 Multiple Stored XSS Vendor Homepage: https://www.rundeck.com/open-source Software Link: https://docs.rundeck.com/downloads.html Exploit Author: Ishaq Mohammed Contact:...

Rundeck Community Edition < 3.0.13 - Persistent Cross-Site Scripting Vulnerability

Exploit for java platform in category web applications Exploit Title: Rundeck Community Edition before 3.0.13 Multiple Stored XSS Vendor Homepage: https://www.rundeck.com/open-source Software Link: https://docs.rundeck.com/downloads.html Exploit Author: Ishaq Mohammed Contact:...

CVE-2019-6804

CVE-2019-6804 is an XSS vulnerability in Rundeck Community Edition prior to 3.0.13, affecting the Job Edit workflow module. The issue stems from how inputs in Arguments, Invocation String, and File Extension fields are rendered in the Execution Preview, with references to assets/javascripts/workf...

CVE-2016-6804

The Apache OpenOffice installer versions prior to 4.1.3, including some branded as OpenOffice.org for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned...

CVE-2016-6804

Summary: CVE-2016-6804 affects the Windows installer for Apache OpenOffice (pre-4.1.3, including OpenOffice.org branding). The issue stems from a search-path defect where a malicious DLL file in the installation directory can be used to impersonate a dependent DLL, enabling arbitrary code executi...

CVE-2017-6804

CVE-2017-6804 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-6804

...

Apache OpenOffice < 4.1.3 Multiple Vulnerabilities

The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.3. It is, therefore, affected by the following vulnerabilities : - A memory corruption issue exists in the Impress tool due to improper validation of user-supplied input when handling elements in invalid...

CVE-2014-6804

CVE-2014-6804 affects the Android app Deschutes Public MobileLibrary (com.bredir.boopsie.deschutes) version 4.5.110. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and exfiltrate sensitive information via a crafted c...

Jamroom 5.0.2 Cross Site Scripting Vulnerability

Jamroom version 5.0.2 suffers from a cross site scripting vulnerability. Product: Jamroom Vendor: Talldude Networks, LLC Vulnerable Versions: 5.0.2 and probably prior Tested Version: 5.0.2 Advisory Publication: November 13, 2013 without technical details Vendor Notification: November 13, 2013...

Jamroom 5.0.2 Cross Site Scripting

Advisory ID: HTB23184 Product: Jamroom Vendor: Talldude Networks, LLC Vulnerable Versions: 5.0.2 and probably prior Tested Version: 5.0.2 Advisory Publication: November 13, 2013 without technical details Vendor Notification: November 13, 2013 Vendor Patch: November 13, 2013 Public Disclosure:...

CVE-2013-6804

Jamroom is affected by a Cross-Site Scripting (XSS) vulnerability in the Search module prior to version 1.1.1. The issue arises from insufficient sanitisation of the HTTP POST parameter search_string sent to /search/results/all/1/4, allowing remote attackers to inject arbitrary HTML/JavaScript. T...

SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6804)

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2008-6804

Tribiq CMS 5.0.9a beta has an authentication bypass vulnerability where remote attackers can gain admin access by manipulating cookies COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG. Root cause details are not fully described in the provided documents. Impact is partial confidentiality/integri...

CVE-2006-6804

CVE-2006-6804 affects Dragon Business Directory - Pro (aka Dragon Internet Business Search Directory - Pro) and is due to an SQL injection in bus_details.asp. The vulnerability is exploitable via the ID parameter in versions 3.01.12 and earlier. Impacted data can be partially disclosed or corrupt...