puerres-narino.gov.co XSS vulnerability

Open Bug Bounty ID: OBB-269742 Description| Value ---|--- Affected Website:| puerres-narino.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

all-free-photos.com XSS vulnerability

Vulnerable URL: http://www.all-free-photos.com/show/showgal.php?idgal=vienne〈=en"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 958093 VIP website status:| No Check...

CVE-2017-6742

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a...

CVE-2017-6737

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a...

CVE-2017-11182

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable...

news.allaboutjazz.com XSS vulnerability

Vulnerable URL: https://news.allaboutjazz.com/faq.php?=1"...

WordPress All-in-One WP Migration Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress All-in-One WP Migration plugin. An attacker can exploit this...

Chengdu Firefox Technology Co., Ltd. website building system full version of the existence of cookie spoofing vulnerability

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services, professional network companies, is based on the Internet to provide a comprehensive e-commerce consulting a...

rhosp-director: libvirtd is deployed with no authentication

A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default by director listening on 0.0.0.0 all interfaces with no-authentication or encryption. Anyone able to make a TCP connection to any comput...

rhosp-director: libvirtd is deployed with no authentication

A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default by director listening on 0.0.0.0 all interfaces with no-authentication or encryption. Anyone able to make a TCP connection to any comput...

CVE-2017-9419

Cross-site scripting XSS vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to inject arbitrary JavaScript via the cs-all-0 parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to inject arbitrary JavaScript via the cs-all-0 parameter...

PT-2017-18908 · Webhammer · Webhammer Wp Custom Fields Search

Name of the Vulnerable Software and Affected Versions: Webhammer WP Custom Fields Search plugin version 0.3.28 Description: The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary JavaScript code. This is achieved via the cs-all-0 paramete...

CVE-2017-9419: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to inject arbitrary JavaScript via the cs-all-0 parameter...

PT-2017-18985

Name of the Vulnerable Software and Affected Versions atmail versions prior to 7.8.0.2 Description The issue allows an attacker to perform a CSRF attack, enabling them to change the SMTP hostname. This can lead to the hijacking of all emails. Recommendations For versions prior to 7.8.0.2, update ...

rhosp-director: libvirtd is deployed with no authentication

A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default by director listening on 0.0.0.0 all interfaces with no-authentication or encryption. Anyone able to make a TCP connection to any comput...

PT-2017-7889

Name of the Vulnerable Software and Affected Versions perltidy versions prior to 20160302 perlcritic affected versions not specified check-all-the-things affected versions not specified Description The issue allows local users to overwrite arbitrary files by creating a symlink. This can be...

CVE-2016-10374: Improper Link Resolution Before File Access

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as...

classifieds.star-telegram.com XSS vulnerability

Vulnerable URL: http://classifieds.star-telegram.com/fort-worth-tx/all-categories/search?searchtype=advanced"'--!prompt/OPENBUGBOUNTY///...

all-in.de XSS vulnerability

Open Bug Bounty ID: OBB-230951 Description| Value ---|--- Affected Website:| all-in.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...