lang-8.com XSS vulnerability

Open Bug Bounty ID: OBB-53766 Description| Value ---|--- Affected Website:| lang-8.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2015-0402

Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to Integration - COM...

Design/Logic Flaw

Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to Integration - COM...

CVE-2015-0402

CVE-2015-0402 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core - Server BizLogic Script component (Integration - COM). The connected Nessus entry notes a vulnerability in this subcomponent that allows unauthenticated network attacks via HTTP, with potential unauthorized upd...

PT-2015-4613

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 and 8.2.2 Description The issue affects the integrity of the system, related to the Integration - COM component in the Siebel Core - Server BizLogic Script. It allows remote attackers to exploit the system...

CVE-2015-0402: Undefined Security Weakness

Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to Integration - COM...

Mao10CMS v3.0.2 储存型xss

简要描述： rt 详细说明： 过滤不严。 以官网为例。 社区发布新话题 成功加载了js 地址 http://www.mao10.com/post-1772.html 然后用户的cookie就来了。。。 漏洞证明：...

F5 Networks BIG-IP : Libtiff vulnerabilities (SOL15863)

CVE-2012-1173 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL15863. The text description of this plugin is C F5 Networks. include"compat.inc"; if description scriptid80447; scriptversion"1.5";...

SkinCrafter3_vs2008 ActiveX Exploit

The vulnerability lies in the COM component used by the product SkinCrafter3vs2008.dll Description: Skin Crafter is a software that is used to create custom skins for different windows applications. SkinCrafter is compatible with Windows XP / Vista / 7 / 8 and earlier versions. ActiveX Buffer...

SkinCrafter3 vs2005 3.8.1.0 - Multiple ActiveX Buffer Overflows

ActiveX Buffer Overflow in SkinCrafter3vs2005 Affected version=3.8.1.0 Vendor Homepage:http://skincrafter.com/ Software Link:skincrafter.com/downloads/SkinCrafterDemo20052008x86.zip The vulnerability lies in the COM component used by the product SkinCrafter3vs2005.dll. Description: Skin Crafter i...

Windows-8.1-ahcache.sys

On Windows 8.1 update the system call NtApphelpCacheControl the code is actually in ahcache.sys allows application compatibility data to be cached for quick reuse when new processes are created. A normal user can query the cache but cannot add new cached entries as the operation is restricted to...

Joomla Component com_event Multiple

An Multiple vulnerability has been reported in Joomla Com Event. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_ganalytics Local File Inclusion

A file inclusion vulnerability has been reported in Joomla Com Ganalytics. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla Component com_prayercenter SQL Injection (CVE-2008-6429)

An SQL injection vulnerability has been reported in Mike Leeper Com Prayercenter. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_youtube SQL Injection (CVE-2010-2923)

An SQL injection vulnerability has been reported in Prasanna Com Youtube. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

ghanacar24.com XSS vulnerability

Open Bug Bounty ID: OBB-52039 Description| Value ---|--- Affected Website:| ghanacar24.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Information disclosure

The www.roads365.com aka ydx.android application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7617

The CVE-2014-7617 entry corresponds to the Android app www.roads365.com (aka ydx.android) version 1.0.1, which does not verify X.509 certificates from SSL servers. The root cause is broken SSL certificate validation in the client, enabling man-in-the-middle attackers to spoof servers and obtain s...

CVE-2014-7617: Undefined Security Weakness

The www.roads365.com aka ydx.android application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7428

The 7725.com Three Kingdoms aka com.platform7725.youai.jiejian application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...