42 matches found
How to Create an ICA File with Minimal Parameters
To create an ICA file with minimal parameters set, complete the following procedure: 1. Download theICA file from this article. 2. Copy the content from this file into anICA file. 3. Update theusername orpassword parameter with the relevant username and password that you use in your environment...
Computer Laboratory Management System 1.0 Insecure Direct Object Reference
Vulnerability Details: Application Name: Computer Laboratory Management System Software Link: https://www.sourcecodester.com/php/17268/computer-laboratory-management-system-using-php-and-mysql.html Vendor Homepage: https://www.sourcecodester.com/users/tips23 BuG: Insecure Direct Object References...
PT-2022-28097 · Unknown · Heimdall Application Dashboard
Name of the Vulnerable Software and Affected Versions: Heimdall Application Dashboard versions 2.5.4 and earlier Description: The issue allows for reflected and stored Cross-Site Scripting XSS attacks via the Application name variable to the "Add application" page. The stored XSS will be triggere...
CVE-2022-47968: Improper Neutralization of Input During Web Page Generation
Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page. The stored XSS will be triggered in the "Application list" page...
Heimdal 跨站脚本漏洞
Heimdal is a Kerberos implementation and security program from Heimdal Open Source. Heimdall Application Dashboard version 2.5.4 before the security vulnerability , the vulnerability stems from its Add application page of the Application name section allows an attacker to achieve reflective...
PT-2022-22966 · Microsoft · Azure Service Fabric Explorer
Name of the Vulnerable Software and Affected Versions: Azure Service Fabric Explorer versions 8.1.316 and earlier Description: The issue allows an attacker to potentially gain administrator rights in a cluster. It affects the Azure Service Fabric Explorer, a tool used for managing Azure Service...
Google Android elevation of privilege vulnerability (CNVD-2022-26761)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a security vulnerability that stems from incorrect input validation in settings, which may display the wrong application name and can be exploited by an attacker to escalate privileges...
CVE-2019-20222
In Support Incident Tracker SiT! 3.67, the Short Application Name and Application Name inputs in the config.php page are affected by XSS...
CVE-2019-20222: Improper Neutralization of Input During Web Page Generation
In Support Incident Tracker SiT! 3.67, the Short Application Name and Application Name inputs in the config.php page are affected by XSS...
Chaturbate: Stored XSS against all Chaturbate users using an application name
The hacker discovered that the tooltip on the app page did not protect against XSS attack in the application name. We quickly resolved this issue. The impact for a new attacker was limited as they would only appear under new apps. This vulnerability was discovered using a simple XSS payload in th...
CVE-2015-3883
Multiple cross-site scripting XSS vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 searchkeywords parameter to index.php/users page; the 2 "Name of application" on index.php/configuration; 3 a new project name on index.php/projects; 4 the task na...
Pushwoosh: Read Application Name , Subscribers Count
Attacker was able to read app name and subscribers count...
MLM Unilevel Plan Script 1.0.2 - SQL Injection
Application Name : MLM Unilevel Plan Script v1.0.2 Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage : http://www.i-netsolution.com/ Vulnerable Type : SQL Injection Date : 2016-10-06 Tested on : Windows 10 / Mozilla...
CVE-2016-3968
Multiple cross-site scripting XSS vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow remote attackers to inject arbitrary web scrip...
CVE-2015-3878
Media Projection in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to bypass an intended screen-recording warning feature and obtain sensitive screen-snapshot information via a crafted application that references a long application name, aka internal bug 23345192...
CVE-2015-3833: Improper Access Control
The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to bypass intended getRecentTasks restrictions and discover the name of the foreground application via a crafted application, aka internal bu...
Real Estate PHP Script Cross Site Scripting
Cross Site Scripting Application Name : Real Estate Php Script Vulnerable Type : Post Cross Site Scripting Infection : Yönetici ve User cookieleri çalýnabilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 | Bug Researchers Example :...
Wordocs Israel FCKeditor Shell Upload
---------------------------------------------------------------- Wordocs Israel FCKeditor Shell Upload Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: Wordocs Israel FCKeditor Shell Upload Disclosure Vulnerabilities Google Dork:...
CVE-2011-3832
Eval injection vulnerability in config.php in Support Incident Tracker aka SiT! 3.65 allows remote authenticated administrators to execute arbitrary PHP code via the applicationname parameter in a save action...
CVE-2009-2191
Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in an application name...