CVE-2017-17949

CVE-2017-17949 applies to Cells Blog 3.5. The vulnerability is a Cross-Site Scripting (XSS) flaw exploited via the pub_readpost.php fmid parameter. The connected sources confirm XSS in Cells Blog 3.5 and describe the vulnerability vector, without providing a specific patch/version, workarounds, o...

CVE-2017-17948

Cells Blog 3.5 is affected by a Cross‑Site Scripting (XSS) vulnerability that can be triggered via the jfdname parameter in an act=showpic request. Multiple sources (NVD/NVD mirror, CNVD, Red Hat advisory, CNVD) corroborate the issue, describing XSS in Cells Blog 3.5 and the jfdname parameter pat...

CVE-2017-17948

Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...

CVE-2017-17950: Improper Neutralization of Special Elements used in an SQL Command

Cells Blog 3.5 has SQL Injection via the pubreadpost.php ptid parameter...

CVE-2017-17948: Improper Neutralization of Input During Web Page Generation

Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request...

CVE-2017-17949: Improper Neutralization of Input During Web Page Generation

Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...

PT-2017-15119

Name of the Vulnerable Software and Affected Versions Cells Blog version 3.5 Description The issue allows for XSS via the jfdname parameter in an "act=showpic" request. Recommendations For version 3.5, avoid using the jfdname parameter in the "act=showpic" request until the issue is resolved...

PT-2017-15120

Name of the Vulnerable Software and Affected Versions Cells Blog version 3.5 Description The issue is related to a security problem where an attacker can inject malicious code. The fmid parameter in the "pub readpost.php" endpoint is vulnerable to this type of attack. Recommendations For Cells Bl...

PT-2017-15121

Name of the Vulnerable Software and Affected Versions Cells Blog version 3.5 Description The issue is related to SQL Injection, which can be exploited via the ptid parameter in the "pub readpost.php" endpoint. Recommendations For Cells Blog version 3.5, update to a newer version that contains a f...

Man Arrested for Threatening Firm with Cyber Attacks for Not Hiring Him

By Waqas There is a reason there has been an increase in This is a post from HackRead.com Read the original post: Man Arrested for Threatening Firm with Cyber Attacks for Not Hiring Him...

Windows Defender Advanced Threat Protection の機械学習: 未知の侵入アクティビティの検出

本記事は、Windows Security のブログ “Windows Defender ATP machine learning: Detecting new and unusual breach activity” 2017 年 8 月 3 日 米...

Windows Defender Advanced Threat Protection で反射型の DLL 読み込みを検出

本記事は、Windows Security のブログ “Detecting reflective DLL loading with Windows Defender ATP” 2017 年 11 月 13 日 米国時間公開...

imprimerie-blog.com XSS vulnerability

Open Bug Bounty ID: OBB-458249 Description| Value ---|--- Affected Website:| imprimerie-blog.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Cambium cnPilot r200/r201 Login Scanner and Config Dump

This module scans for Cambium cnPilot r200/r201 management login portals, attempts to identify valid credentials, and dump device configuration. The device has at least two 2 users - admin and user. Due to an access control vulnerability, it is possible for 'user' account to access full device...

Cells Blog 3.5 - bgid fmid fnid SQL Injection

Cells Blog 3.5 - bgid fmid fnid SQL Injection Exploit Title: Cells Blog 3.5 - SQL Injection Dork: N/A Date: 16.12.2017 Vendor Homepage: http://www.cells.tw/ Software Link: http://www.cells.tw/cells/ Version: 3.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Senc...

Cells Blog 3.5 - 'bgid' / 'fmid' / 'fnid' SQL Injection

Exploit Title: Cells Blog 3.5 - SQL Injection Dork: N/A Date: 16.12.2017 Vendor Homepage: http://www.cells.tw/ Software Link: http://www.cells.tw/cells/ Version: 3.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Sencan Author Web: http://ihsan.net Author Social:...

blog.ticketmaster.nl XSS vulnerability

Open Bug Bounty ID: OBB-448092 Description| Value ---|--- Affected Website:| blog.ticketmaster.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Beware of PerformanceTiming.domInteractive

...

Beware of PerformanceTiming.domInteractive

...

blog.andertons.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-436194 Description| Value ---|--- Affected Website:| blog.andertons.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...