CVE-2016-10735

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...

CVE-2018-20675

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A before v1.21B08Beta, DIR-850L B before v2.22B03Beta, and DIR-880L A before v1.20B02Beta devices allow authentication bypass...

CVE-2018-20613

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

CVE-2018-20613

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

Cross site request forgery (csrf)

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

CVE-2018-20613

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

CVE-2018-20613

CVE-2018-20613 is described as a CSRF issue in TEMMOKU T1.09 Beta that could allow admin/user/add actions. The connected documents do not provide concrete technical details (no affected versions, root cause, impact, or fixes) beyond noting CSRF. No exploitation details are present in the provided...

CVE-2018-20613: Cross-Site Request Forgery (CSRF)

TEMMOKU T1.09 Beta allows admin/user/add CSRF...

PT-2018-15477

Name of the Vulnerable Software and Affected Versions TEMMOKU T1.09 Beta Description The issue allows for a CSRF attack on the admin/user/add functionality. Recommendations For TEMMOKU T1.09 Beta, consider implementing CSRF protection mechanisms to prevent unauthorized requests to the...

beta.medworm.com XSS vulnerability

Open Bug Bounty ID: OBB-714983 Description| Value ---|--- Affected Website:| beta.medworm.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

1Password for macOS Information Disclosure Vulnerability

1Password for macOS is a macOS-based application for storing and managing personal passwords. An information disclosure vulnerability exists in version 7.2.3.BETA prior to 1Password 7.2.3.BETA-3 for macOS-based platforms, which can be exploited by attackers to obtain sensitive information...

Frappe ERPNext SQL Injection Vulnerability (CNVD-2019-17163)

Frappe ERPNext is an open source ERP Enterprise Resource Planning system. The system includes functions for financial management, inventory management, customer relationship management, project management and human resource management. A SQL injection vulnerability exists in Frappe ERPNext versio...

beta-tools.com XSS vulnerability

Open Bug Bounty ID: OBB-709946 Description| Value ---|--- Affected Website:| beta-tools.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

beta-wp.itsu.com XSS vulnerability

Open Bug Bounty ID: OBB-707762 Description| Value ---|--- Affected Website:| beta-wp.itsu.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

CVE-2018-19859

OpenRefine before 3.2 beta is vulnerable to directory traversal via a relative pathname in a ZIP archive (CVE-2018-19859). The issue is confirmed across multiple advisories linking to OpenRefine's project import path handling. Mitigation known in the connected docs includes patches suggested by P...

Nmap Web Dashboard and Reporting: WebMap

Features Import and parse Nmap XML files Statistics and Charts on discovered services, ports, OS, etc… Inspect a single host by clicking on its IP address Attach labels on a host Insert notes for a specific host Create a PDF Report with charts, details, labels and notes Copy to clipboard as Nikto...

CVE-2018-19133

CVE-2018-19133 involves Flarum Core 0.1.0-beta.7.1, where a flaw leads to exposure of user email addresses (PII). The connected Red Hat/GHSA entries reinforce the same description of a privacy leak, but the provided documents do not specify the root cause details, affected code paths, or a remedi...

CVE-2018-9208

Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...

OracleVM 3.3 / 3.4 : nss (OVMSA-2018-0264)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed - Backport upstream fix for CVE-2018-12384 - Remove nss-lockcert-api-change.patch, which...

D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ D-Link Central WiFiManager Software Controller Multiple Vulnerabilities 1. Advisory Information Title: D-Link Central WiFiManager Software Controller Multiple Vulnerabilities Advisory ID: CORE-2018-0010 Advisory URL:...