Cross-Site Scripting (XSS)

getkirby/kirby is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the title of a new page...

Cross-site Scripting (XSS)

materialize is vulnerable to cross-site scripting XSS attacks. A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the Toast feature...

Cross-site Scripting(XSS)

com.liferay.knowledge.base.service is vulnerable to cross-site scripting XSS. The vulnerability exists because it does not properly sanitize the user-provided parameters such as userId, allowing a remote attacker to inject arbitrary Javascript into the victim's browser...

Cisco Webex Business Suite Arbitrary Text Injection

The software vulnerabilities of Cisco Webex Business Suite exist due to the lack of measures taken to neutralize specific elements. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary text into the user’s browser remotely...

CVE-2019-1680 Cisco Webex Business Suite Content Injection Vulnerability

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...

Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2018-13385)

Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Enterprise Server 2016 are both enterprise business collaboration platforms from Microsoft Corporation USA. The platforms are used to consolidate business information and enable sharing of work, collaborating with others, organizing...

Python-Based Adware Evolves to Install Malicious Browser Extensions

Security researchers have been warning of a few newly detected variants of python-based adware that are being distributed in the wild not only to inject ads but also found installing malicious browser extensions and hidden cryptocurrency miner into victims' computers. Dubbed PBot, or PythonBot, t...

UBUNTU-CVE-2017-17520

DISPUTED tools/urlhandler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has reported that this is intentional...

Dyreza Banker Trojan Attackers Exploiting CVE-2014-4114 Windows Flaw

The Dyreza Trojan is nothing if not ambitious. The malware has been spotted doing a variety of interesting things in the last year, including bypassing SSL and targeting users of specific business apps. Now the Trojan is exploiting the recently disclosed CVE-2014-4114 vulnerability in Windows tha...

Aleza Portal 1.6 - Insecure (SQLi) Cookie Handling

No description provided by source. Aleza Portal v1.6 - Insecure SQLi Cookie Handling ========================================================= My + Author : KnocKout Contact : [email protected] Software info Web App. : Aleza Portal v1.6 Software: http://www.webavail.com/ -Demo :...

DarkComet-RAT v4.2 fwb (Firewall bypass)

DarkComet-RAT v4.2 fwb Firewall bypass This version is firewall bypass it will inject to web browsers and bypass firewall rules. Targets are in this order : Firefox, Opera, Chrome, Safari, Internet Explorer and Explorer if all fails normally never then it runs normally. Notice now you can use...

DarkComet-RAT v4.2 fwb (Firewall bypass)

DarkComet-RAT v4.2 fwb Firewall bypass This version is firewall bypass it will inject to web browsers and bypass firewall rules. Targets are in this order : Firefox, Opera, Chrome, Safari, Internet Explorer and Explorer if all fails normally never then it runs normally. Notice now you can use...

WikiWebHelp 0.3.3 - Insecure Cookie Handling

WikiWebHelp 0.3.3 - Insecure Cookie Handling =============================================== WikiWebHelp v0.3.3 = Insecure Cookie Handling =============================================== My + Author : FuRty Contact : [email protected] Software info Web App. : WikiWebHelp Version : 0.3.3 Software:...

Wiki Web Help <= 0.3.3 Insecure Cookie Handling

No description provided by source. =============================================== WikiWebHelp v0.3.3 = Insecure Cookie Handling =============================================== My + Author : FuRty Contact : [email protected] Software info Web App. : WikiWebHelp Version : 0.3.3 Software:...

WikiWebHelp 0.3.3 - Insecure Cookie Handling

=============================================== WikiWebHelp v0.3.3 = Insecure Cookie Handling =============================================== My + Author : FuRty Contact : [email protected] Software info Web App. : WikiWebHelp Version : 0.3.3 Software: http://sourceforge.net/projects/wwh/ Vendor :...

Aleza Portal v1.6 - Insecure (SQLi) Cookie Handling

Exploit for php platform in category web applications =================================================== Aleza Portal v1.6 - Insecure SQLi Cookie Handling =================================================== My + Author : KnocKout Contact : email protected Software info Web App. : Aleza Portal v1...

EasyEstateManager - Insecure Cookie Handling

Exploit for php platform in category web applications ============================================ EasyEstateManager - Insecure Cookie Handling ============================================ My + Author : KnocKout + Greatz : DaiMon Contact : email protected Software info Script : EasyEstateManager...

Advisory: ASPBB <= 0.52 (perform_search.asp) XSS vulnerability

--Security Report-- Advisory: ASPBB = 0.52 performsearch.asp XSS vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 04:26 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: ASPBB www.aspbb.org Version: 0.52 and...