6423 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name...
CVE-2018-14493
Cross-site scripting XSS vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name...
CVE-2018-14493
Cross-site scripting XSS vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name...
CVE-2018-14493
CVE-2018-14493: Open-AudIT Community 2.2.6 has a cross-site scripting (XSS) vulnerability in the Groups Page that allows injection of arbitrary script or HTML via the group name. The issue affects the Community edition and is detailed across multiple references (Open-AudIT 2.2.6 XSS). According t...
On Financial Fraud
There are some good lessons in this article on financial fraud: That's how we got it so wrong. We were looking for incidental breaches of technical regulations, not systematic crime. And the thing is, that's normal. The nature of fraud is that it works outside your field of vision, subverting the...
July 24, 2018âKB4338827 (OS Build 15063.1235)
None None...
Unable to join second StoreFront server after upgrade, with error "Error getting replication keys"
Follow are the symptoms: 1 StoreFront join operation fails with following error: 2 If we enable Audit for logon failure and success, you will observer following event on the Joiner: Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: XXXXXXXXXXXXXXXXXXX Event ID: 4625 Task...
Open-AudIT Community 2.1.1 - Cross-Site Scripting Vulnerability
Exploit for multiple platform in category web applications Exploit Title: Open-AudIT Community - 2.1.1 - Cross Site Scripting Vulnerability Google Dork:NA Exploit Author: Ranjeet Jaiswal Vendor Homepage: https://opmantek.com/ Software Link:http://dl-openaudit.opmantek.com/OAE-Win-x8664-...
CVE-2018-3071
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Audit Log. Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attack...
Open-AudIT Community 2.1.1 - Cross-Site Scripting
Open-AudIT Community 2.1.1 - Cross-Site Scripting Exploit Title: Open-AudIT Community - 2.1.1 - Cross Site Scripting Vulnerability Google Dork:NA Exploit Author: Ranjeet Jaiswal Vendor Homepage: https://opmantek.com/ Software Link:http://dl-openaudit.opmantek.com/OAE-Win-x8664- release2.2.1.exe...
UBUNTU-CVE-2018-3071
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Audit Log. Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attack...
Open-AudIT Community 2.1.1 Cross Site Scripting
Exploit Title: Open-AudIT Community - 2.1.1 - Cross Site Scripting Vulnerability Google Dork:NA Exploit Author: Ranjeet Jaiswal Vendor Homepage: https://opmantek.com/ Software Link:http://dl-openaudit.opmantek.com/OAE-Win-x8664- release2.2.1.exe Affected Version: 2.1.1 Category: WebApps Tested on...
Open-AudIT Community 2.1.1 - Cross-Site Scripting
Exploit Title: Open-AudIT Community - 2.1.1 - Cross Site Scripting Vulnerability Google Dork:NA Exploit Author: Ranjeet Jaiswal Vendor Homepage: https://opmantek.com/ Software Link:http://dl-openaudit.opmantek.com/OAE-Win-x8664- release2.2.1.exe Affected Version: 2.1.1 Category: WebApps Tested on...
Open-AudIT Community 'Attributes' Functionality Cross Site Scripting Vulnerability
Open-AudIT is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Lynis 2.6.6 - Security Auditing Tool for Unix/Linux Systems
We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...
Default credentials
PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...
Open-AudIT Cross-Site Scripting Vulnerability (CNVD-2018-12810)
Open-AudIT is a network discovery and auditing program. The program intelligently scans networks and network devices and provides status reports. A cross-site scripting vulnerability exists in the Attributes feature in versions of Open-AudIT Community Edition prior to 2.2.2. A remote attacker can...
Free High-Tech Bridge ImmuniWeb Application Discovery service
Today I would like to talk about another service for application security analysis by High-Tech Bridge. It's called ImmuniWeb Application Discovery. This service can get information about your web and mobile applications available from the Internet. Believe me, this is not so obvious for a large...
Top 5 my own security audit fails
I have been in application security since 2009. Since that time I was involved in more than 300 different projects and sometimes even discovered new things like SSRF or the first XXE OOB FTP exploitation. Today Iâd like to talk about my fails during my 300+ projects to ensure you donât repeat my...
CVE-2018-11124
Cross-site scripting XSS vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted attribute name of an Attribute...