124 matches found
onthesnow.com XSS vulnerability
Open Bug Bounty ID: OBB-604661 Description| Value ---|--- Affected Website:| onthesnow.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Aspen HTTP Server Detection
Binary data aspenwebdetect.nbin...
Aspen < 0.22 Directory Traversal
According to its banner, the version of Aspen running on the remote host is prior to 0.22. It is, therefore, affected by a directory traversal vulnerability due to improper sanitization of user-supplied input. Note that Nessus has not tested for this issue but has instead relied only on the...
Aspen: Session does't get expired after changing the password in https://readthedocs.org
Session does't get expired after changing the password in https://readthedocs.org...
Aspen: Email Spoofing
There is an Email Spoofing Vulnerability. Steps to reproduce: 1 Go to http://emkei.cz/ 2 Fill "From Email" field to [email protected] or any other aspen email. 3 Fill the victim's address your address to "TO" field and fill in other details as you wish. You will receive email from aspen admin...
Aspen: client_secret Token disclosure
Greetings, I think I've discovered a clientsecret token disclosure. Proof of concept: 1. Go to https://github.com/AspenWeb/experimental-javascript-version/blob/master/www/blog/index.html 2. At the line 6, a clientsecret token it's disclosed...
aspenavionics.com XSS vulnerability
Vulnerable URL: http://aspenavionics.com/search?q=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1168289 VIP website status:| No Coordinated...
aspenavionics.com XSS vulnerability
Vulnerable URL: https://www.aspenavionics.com/search?q=%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
aspen-ruggerfest.com XSS vulnerability
Vulnerable URL: http://aspen-ruggerfest.com/wp-content/themes/ruggerfest/js/mediaelement/flashmediaelement.swf?jsinitfu%xnction=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...
Gratipay: upgrade Aspen on inside.gratipay.com to pick up CR injection fix
1 Using IE11, open DevTools and start network capture 2 visit the following URL: http://inside.gratipay.com/assets/%0dSet-Cookie:%20qwe=qwe%0dq 3 find a 'qwe' cookie set in the response There is a 0x0d character injected, which can be used as a header delimiter in IE. To see this behaviour using...
aspen-ruggerfest.com XSS vulnerability
Vulnerable URL: http://aspen-ruggerfest.com/wp-content/themes/ruggerfest/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...
Aspen 0.8 - Directory Traversal
No description provided by source. Aspen 0.8 - Directory Traversal Earlier versions are also possibly vulnerable. INFORMATION Product: Aspen 0.8 Remote-exploit: yes Vendor-URL: http://www.zetadev.com/software/aspen/ Discovered by: Daniel Ricardo dos Santos CVE Request - 15/03/2013 CVE Assign -...
CVE-2013-2619
Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. dot dot to the default URI...
Directory traversal
Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. dot dot to the default URI...
CVE-2013-2619
Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. dot dot to the default URI...
CVE-2013-2619
CVE-2013-2619 affects Aspen servers prior to 0.22, with a directory traversal vulnerability that allows an attacker to read arbitrary files via a .. to the default URI. The issue is tied to improper sanitization in Aspen’s handling of path input. Public references confirm this is a remote, exploi...
CVE-2013-2619
Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. dot dot to the default URI...
CVE-2013-2619: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. dot dot to the default URI...
PT-2014-2603
Name of the Vulnerable Software and Affected Versions Aspen versions prior to 0.22 Description The issue allows remote attackers to read arbitrary files by utilizing a .. dot dot in the default URI, which enables directory traversal. Recommendations For versions prior to 0.22, update to version...
Aspen Server < 0.22 Directory Traversal Vulnerability - Active Check
Aspen Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...