1777 matches found
sdaa.gov.ae XSS vulnerability
Open Bug Bounty ID: OBB-706634 Description| Value ---|--- Affected Website:| sdaa.gov.ae Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...
CVE-2018-4039
CVE-2018-4039 is a concrete vulnerability in Atlantis Word Processor 3.2.7.2 where the PNG image handling allows an out-of-bounds write during PNG decoding (inflate_table writes beyond a 64-byte buffer if code lengths exceed 15). This memory corruption can lead to code execution in the applicatio...
TerraMaster TOS Session Fixation Vulnerability
TerraMaster TOS is a set of storage server special operating system based on Linux platform developed by Terra Master. The system supports file sharing, cloud data synchronization, data backup and virtualization. A session fixation vulnerability exists in the web application in TerraMaster TOS...
TIBCO Statistica Server TIBCO Statistica Component Cross-Site Scripting Vulnerability
TIBCO Statistica Server is a suite of job servers from TIBCO Software that provides a governance framework for shared workspaces and reusable templates.Statistica is one of the components... A cross-site scripting vulnerability exists in the web application of the TIBCO Statistica component in...
pearl.ch XSS vulnerability
Open Bug Bounty ID: OBB-701148 Description| Value ---|--- Affected Website:| pearl.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
aeit.it XSS vulnerability
Open Bug Bounty ID: OBB-700201 Description| Value ---|--- Affected Website:| aeit.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
emw.eu XSS vulnerability
Open Bug Bounty ID: OBB-698587 Description| Value ---|--- Affected Website:| emw.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
weland.de XSS vulnerability
Open Bug Bounty ID: OBB-697351 Description| Value ---|--- Affected Website:| weland.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
Jelastic 5.4 - host SQL Injection
Jelastic 5.4 - host SQL Injection Exploit Title: Jelastic 5.4 - 'host' SQL injection Google Dork: N/A Date: date Exploit Author: Procode701 Vendor Homepage: https://jelastic.com/ Software Link: https://jelastic.com/ Version: 5.4 Tested on: Kali Linux CVE : N/A POC: The application...
Expense Management 1.0 - Arbitrary File Upload
Exploit Title: Expense Management 1.0 - Arbitrary File Upload Dork: N/A Date: 2018-10-30 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.webprojectbuilder.com/item/expense-management Software Link:...
drks.de XSS vulnerability
Open Bug Bounty ID: OBB-683334 Description| Value ---|--- Affected Website:| drks.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
CVE-2018-11075
RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticated malicious user, with the knowledge of a target user's anti-CSRF token, could potentially exploit this vulnerability by tricking a victim...
lagump3terbaru.biz XSS vulnerability
Open Bug Bounty ID: OBB-679598 Description| Value ---|--- Affected Website:| lagump3terbaru.biz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-2464
SAP WebDynpro Java, versions 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in a stored Cross-Site Scripting XSS vulnerability...
Denial Of Service (DoS) Through Integer Underflow
libgdkpixbuf-2.0.so is vulnerable to denial of service DoS attacks. A malicious user can pass an ICO file to the loadresources function in io-icns.c to cause an integer underflow, crashing the application...
CVE-2018-14965
An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF...
CVE-2018-14924
Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" aka user fullname field...
hotellaslomas.com.pe XSS vulnerability
Open Bug Bounty ID: OBB-655156 Description| Value ---|--- Affected Website:| hotellaslomas.com.pe Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
