9398 matches found
Super CMS Blog Pro PHP Script 1.0 Cross Site Scripting
Exploit Title: Super Cms Blog Pro PHP Script v1.0 - XSS Google Dork: N/A Date: 2018/28/7 Exploit Author: GUIA Brahim Fouad Author Mail : [email protected] Vendor Homepage: https://www.codester.com/Seunex Software Buy: https://www.codester.com/items/8005/super-cms-blog-pro-php-script Demo...
PT-2018-19355
Уязвимость CMS-системы Super CMS Blog Pro PHP Script существует из-за недостаточной проверки входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, осуществлять межсайтовые сценарные атаки...
blog-emploi.com XSS vulnerability
Open Bug Bounty ID: OBB-654648 Description| Value ---|--- Affected Website:| blog-emploi.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
Friday Squid Blogging: Dead Squid on Prince Edward Island
A beach on Prince Edward Island is littered with dead squid. No one knows why. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
CVE-2018-14422
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
CVE-2018-14422
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
SansCMS Cross-Site Scripting Vulnerability
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the blog/index.php file in SansCMS version 0.7. A remote attacker can exploit this vulnerabilit...
CVE-2018-14422
SansCMS 0.7 contains a cross-site scripting vulnerability in blog/index.php via the q parameter. The issue allows injection of arbitrary web script/HTML, with the impact described as partial integrity compromise and low confidentiality impact in CVSS terms. No precise exploit details are provided...
CVE-2018-14422
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
frank-hagenow.com XSS vulnerability
Open Bug Bounty ID: OBB-650282 Description| Value ---|--- Affected Website:| frank-hagenow.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PT-2018-12504
Name of the Vulnerable Software and Affected Versions SansCMS version 0.7 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the q parameter of the 'blog/index.php' endpoint. Recommendations...
CVE-2018-14422: Improper Neutralization of Input During Web Page Generation
blog/index.php in SansCMS 0.7 has XSS via the q parameter...
HTTP+TLS and IPV6-Enablement Both in the Majority for World Cup Streaming
The underlying protocols of the Internet continue to evolve, and massive events such as the World Cup are a great opportunity to see this in action...
Friday Squid Blogging: Antifungal Squid-Egg Coating
The Hawaiian bobtail squid coats its eggs with antifungal bacteria. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Security Bulletin: Information disclosure in Liberty for Java for IBM Cloud (CVE-2018-1553)
Summary There is an information disclosure in WebSphere Application Server Liberty using the SAML Web SSO feature. Vulnerability Details CVEID: CVE-2018-1553 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by mishandling ...
Common Questions and Answers Salesforce ISVs Need to Know for FedRAMP
Many Salesforce Independent Software Vendors ISVs are interested in pursuing FedRAMP to serve federal customers, but have many questions about the process. The four questions below are the most common questions that Coalfire receives from these ISV partners; we have provided some basic responses ...
HID discoveryd command_blink_on Unauthenticated Remote Command Execution Exploit
This Metasploit module exploits an unauthenticated remote command execution vulnerability in the discoveryd service exposed by HID VertX and Edge door controllers. This Metasploit module was tested successfully on a HID Edge model EH400 with firmware version 2.3.1.603 Build 04/23/2012. This modul...
Security Bulletin: Cross-Site Scripting Vulnerability Affects IBM Emptoris Sourcing
Summary Cross-site scripting vulnerability in IBM Emptoris Sourcing could allow an attacker to execute script in a victim's Web browser Vulnerability Details IBM Emptoris Sourcing is vulnerable to cross-site scripting, caused by improper validation of user supplied input. A remote attacker could...
Friday Squid Blogging: Fried Squid with Turmeric
Good-looking recipe. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
springboardcourses.ie XSS vulnerability
Open Bug Bounty ID: OBB-638248 Description| Value ---|--- Affected Website:| springboardcourses.ie Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...